n(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) 03:35:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1008000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000400050000006c89a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 03:35:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)="f1c8a3338fe2c7ae84358c9bb55fd0b3d22b176c503d90709db7672bc217c2b8a1fe0b795ac0f9701a7d6926ec1b1e20f02b9b820b29b03045fe7a757aed2fbb9fe797f1391b8130d13e51ac105ee9013508b5f05b3cae351953ce86f4b486fadcfe34c03a6af39d7fb1ba487f6e5ff9c51060f533c44a0cdf0eb027574ae9444aa0f9f8e735b0b12384e8e7cf3ad6f8a0750a0b96a5cb407e10161e9525d9d75ba26a403a7cf0cd330ada30c065eab998c926e1fe9fa5187a8b0f238ab9fdd1a6ef95ab8d736091f3", 0xc9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/169, 0xa9}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) shutdown(r0, 0x1) 03:35:16 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) [ 577.492441][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 577.606882][T27858] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 03:35:17 executing program 1: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = dup(r0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000eed000)={0x2, 0x4e21, @dev}, 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @empty}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r4, 0x0, 0x80000000) 03:35:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="1c0000001200230200000066835f7f081c1400"/28, 0x1c) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1008000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000400050000006c89a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 03:35:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) [ 577.979790][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 578.007200][T27882] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 03:35:17 executing program 2: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1008000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904024865161a000400050000006c89a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 03:35:17 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) [ 578.356571][T27904] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 03:35:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) 03:35:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) 03:35:18 executing program 1: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) 03:35:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) 03:35:18 executing program 2: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:18 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000618d7fec9ed108175bfeaf812"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f}]}) 03:35:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:18 executing program 4: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000015c0)=0x3, 0x4) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202ea055f32f66696c65300a"], 0x10094) 03:35:19 executing program 1: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x4, &(0x7f0000000000)={0x2000000}, 0x4) r5 = dup2(r0, r4) dup3(r5, r1, 0x0) 03:35:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x7901, 0x4000000000401}, {0x61}, {0x6}]}, 0x10) 03:35:19 executing program 2: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000100)=0x4) 03:35:19 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 4: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000100)=0x4) 03:35:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x81}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=""/48}, 0x18) 03:35:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000100)=0x4) 03:35:19 executing program 4: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4000000000084) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x200, 0x4) close(r2) 03:35:19 executing program 3: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1000000000004e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 03:35:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000100)=0x4) 03:35:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = epoll_create(0x143) r3 = epoll_create(0x20) r4 = epoll_create(0x800f61) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000c7f000)) 03:35:20 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x960000) 03:35:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = epoll_create(0x143) r3 = epoll_create(0x20) r4 = epoll_create(0x800f61) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000c7f000)) 03:35:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 03:35:20 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000042f7b60fb03018608036b6070000000007003f00407d66ad7587f02d4554de82fff80000402f"]}) 03:35:20 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) 03:35:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x100, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa02e99e00000001ddb7bf69b40030000002000000000000000000ffffe0000002ff020000000000000000000000000001ff0090780009290060b684fa000000000000010000002a270972ffff3323c2f66a7b8640285c803b17ffffffff000000"], 0x0) 03:35:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = epoll_create(0x143) r3 = epoll_create(0x20) r4 = epoll_create(0x800f61) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000c7f000)) 03:35:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x100, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa02e99e00000001ddb7bf69b40030000002000000000000000000ffffe0000002ff020000000000000000000000000001ff0090780009290060b684fa000000000000010000002a270972ffff3323c2f66a7b8640285c803b17ffffffff000000"], 0x0) 03:35:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2f, 0x305, 0x0, 0x0, {0xc, 0x1000000}, [@nested={0x18, 0x3, [@typed={0xec0, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 03:35:20 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp}) 03:35:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:20 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 03:35:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = epoll_create(0x143) r3 = epoll_create(0x20) r4 = epoll_create(0x800f61) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000c7f000)) 03:35:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x100, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa02e99e00000001ddb7bf69b40030000002000000000000000000ffffe0000002ff020000000000000000000000000001ff0090780009290060b684fa000000000000010000002a270972ffff3323c2f66a7b8640285c803b17ffffffff000000"], 0x0) 03:35:21 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 03:35:21 executing program 4: setresuid(0x0, 0xfffe, 0x0) r0 = geteuid() setresuid(r0, r0, r0) setresuid(r0, 0x0, 0x0) 03:35:21 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x100, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa02e99e00000001ddb7bf69b40030000002000000000000000000ffffe0000002ff020000000000000000000000000001ff0090780009290060b684fa000000000000010000002a270972ffff3323c2f66a7b8640285c803b17ffffffff000000"], 0x0) 03:35:21 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:21 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 03:35:21 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp}) 03:35:21 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:21 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 03:35:21 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp}) 03:35:21 executing program 4: setresuid(0x0, 0xfffe, 0x0) r0 = geteuid() setresuid(r0, r0, r0) setresuid(r0, 0x0, 0x0) 03:35:21 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:21 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:21 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:21 executing program 4: setresuid(0x0, 0xfffe, 0x0) r0 = geteuid() setresuid(r0, r0, r0) setresuid(r0, 0x0, 0x0) 03:35:22 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp}) 03:35:22 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:22 executing program 4: setresuid(0x0, 0xfffe, 0x0) r0 = geteuid() setresuid(r0, r0, r0) setresuid(r0, 0x0, 0x0) 03:35:22 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:22 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:22 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:22 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e526e6a5dd80009d00010800f60000000300f87f000a640000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 03:35:23 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e526e6a5dd80009d00010800f60000000300f87f000a640000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 03:35:23 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:23 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x57) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x83c6, 0x0, 0x0) 03:35:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000240), 0xffffffffffffff8e, 0x0, 0x0, 0x15f) 03:35:23 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e526e6a5dd80009d00010800f60000000300f87f000a640000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 03:35:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001700)={0x1, 0x1ff, 0x100000001, 0x40}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) [ 584.198884][T21207] libceph: connect (1)[d::]:6789 error -101 [ 584.230250][T21207] libceph: mon0 (1)[d::]:6789 connect error 03:35:23 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e526e6a5dd80009d00010800f60000000300f87f000a640000000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 03:35:23 executing program 2: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:23 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000240), 0xffffffffffffff8e, 0x0, 0x0, 0x15f) [ 584.668191][ T5] libceph: connect (1)[d::]:6789 error -101 [ 584.686386][ T5] libceph: mon0 (1)[d::]:6789 connect error 03:35:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000240)=""/117, 0x446) 03:35:24 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='cpuZcc\x7f\x00\x00^\xe7\xc4\xac\x89\x81\x85\vusage_Yerfpu_sys\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000280)={0x18}, 0x18) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x0) 03:35:24 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:24 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) setresuid(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x5, @raw_data="327356077c7fc79793c206ed66987c9dc8151bdb412009d1e38bbddefcd4d1840d666129bb47191e3515a51e135edd27a1ecb66a97b34a210153017960c9153d9e91eb508d5aed1f72f1af9383d7328cea9d1f4d4272bc837d4153886a5ab6d32978d2b9517a9d28be4ba699355134ad1c823427e3a74d65d226b0e3ba9b07b33d56864cd1bf7e14ae239fbb13102437948433f5c2ca461afb6fab99857e676720a0a00f0d7b7740b0deff667f0ee874246aed4ca2a7793083d5daee6923e71880fb700441cfe573"}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1002000000016) 03:35:24 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='cpuZcc\x7f\x00\x00^\xe7\xc4\xac\x89\x81\x85\vusage_Yerfpu_sys\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000280)={0x18}, 0x18) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x0) 03:35:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000240), 0xffffffffffffff8e, 0x0, 0x0, 0x15f) 03:35:24 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='cpuZcc\x7f\x00\x00^\xe7\xc4\xac\x89\x81\x85\vusage_Yerfpu_sys\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000280)={0x18}, 0x18) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x0) 03:35:24 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) [ 585.544041][ T9055] libceph: mon1 (1)[::]:6789 socket error on write [ 585.568009][ T9055] libceph: mon1 (1)[::]:6789 socket error on write [ 585.620392][T23737] libceph: connect (1)[d::]:6789 error -101 [ 585.629090][T23737] libceph: mon0 (1)[d::]:6789 connect error 03:35:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000240), 0xffffffffffffff8e, 0x0, 0x0, 0x15f) [ 585.778822][ T9055] libceph: mon1 (1)[::]:6789 socket error on write 03:35:25 executing program 2: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 1: semtimedop(0x0, &(0x7f00000005c0)=[{0x0, 0xfffffffffffffffa}], 0x1, 0x0) 03:35:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:35:25 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='cpuZcc\x7f\x00\x00^\xe7\xc4\xac\x89\x81\x85\vusage_Yerfpu_sys\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, 0x0, 0x0) write$P9_RCREATE(r2, &(0x7f0000000280)={0x18}, 0x18) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x0) 03:35:25 executing program 3: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 0: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 1: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 5: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 4: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:25 executing program 0: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 5: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 3: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 2: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 0: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x7f, 0x4) 03:35:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x41, 0x20011, r0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x5385, &(0x7f0000000000)) 03:35:26 executing program 4: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 5: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 1: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 3: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 2: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12, 0xfffffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 587.774066][T29073] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 587.808613][T29073] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 03:35:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x1000981900}) close(r0) 03:35:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2276, &(0x7f0000000000)) 03:35:27 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x54}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:27 executing program 1: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:35:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) 03:35:27 executing program 4: socket$inet(0x2b, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(0x0, 0x26, 0x80000000000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r1 = getpid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) llistxattr(0x0, &(0x7f0000000240)=""/140, 0x8c) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e55572"], 0x79) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) [ 588.657052][T29101] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 03:35:27 executing program 5: r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0xc1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) [ 589.012807][ T26] audit: type=1800 audit(2000000128.269:124): pid=29112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17104 res=0 03:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) 03:35:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) 03:35:28 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) tee(r1, r0, 0x100000001, 0x0) 03:35:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:28 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) 03:35:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:28 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/149, 0x207a0cb3) 03:35:28 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91774d868e78b371891bfe56d62d0668ef9e0e9f7fc1f028749e0346f9bf9a82983bfe47501eb0be45f550000a30b5213ab0bb361b317ff5cbbe0d4b180d328a4172daedef5b7ba0fc0a0cde35995b2e3488c74c1340ee86b63a4b881ccba48e9021956e273b235bdd987c7ab7a8c588a7712c40fed996ddd5ca4f60142e7510a9ca0a2a2ec3d434d138155aab9d663280cb164046e1a66927f221d1ff37a28fe5cc106d9bc4853fe434ff8bacb2db4aab93b86c6cd93d327798a8435046c5f88f3f6f85aa58c04001dda4b4ffe49a6c57a8dc7da68a8f2985e86f9c69bd6febe904b5d39c15042b6ede65d9c6dab9f9a61b27be42df351e5a79185ecf3081287585273de56349f7e448099efcede983ee60f0fb71943efb599b58dc7443df04b234de2e8c75c4ce7514eae64da1c3197f366f4a880b2e5f83ca48c9f7ed529f070f24b7677508aab9fa97b8956c277efc5a98094276ccc2544e265feb087b24630422cb7a4c2ce7de8841d64d1b2ac2431d121f43cd8fec56e120f196df241907c3e29f2be681aa0f6b69d44ba6cf12f80bd3ab3a217aea557d288169f7a64656c126c4a77b403db365efa87c1cab42333059852f7ee963e20999a5d47a7c26c14e2006bb673afb033a54b40914b6c4c22fb6ffce6ffb749a1194537c12434e3691527d7071af70661f310fe6e0bf377b4ee3e6647f38a24c9568f759e64041b20d643900fc579512c8707324410e5abfbe1bd328d918cd47dd6abc90dc9d145a690121542e8105a4b6c0fc7cf3b95f495d8384263acb9d5eb70d0d00c3b3828eeb23d505f493048c12c59901cf75b4efd403fe58cb67c0d1cfc0b2f48f98d2ba163d99cfa00f2e32edba28560f00b8f649e12781f5e856de53a4fc8df1716ac271a3a28c6a74a086e1cf3b96e79dc3fd4265623ef48cd5e1a6e22a214b005fc9c2fafdd0abdc4c681cb681e27d311085d3f9c307b6c177f4625b5d1bc525dacf1d0d3a059502f777feee0b7320ab3b64c89f80c1", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$net_dm(0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) 03:35:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:29 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:29 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:29 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) tee(r1, r0, 0x100000001, 0x0) 03:35:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:29 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91774d868e78b371891bfe56d62d0668ef9e0e9f7fc1f028749e0346f9bf9a82983bfe47501eb0be45f550000a30b5213ab0bb361b317ff5cbbe0d4b180d328a4172daedef5b7ba0fc0a0cde35995b2e3488c74c1340ee86b63a4b881ccba48e9021956e273b235bdd987c7ab7a8c588a7712c40fed996ddd5ca4f60142e7510a9ca0a2a2ec3d434d138155aab9d663280cb164046e1a66927f221d1ff37a28fe5cc106d9bc4853fe434ff8bacb2db4aab93b86c6cd93d327798a8435046c5f88f3f6f85aa58c04001dda4b4ffe49a6c57a8dc7da68a8f2985e86f9c69bd6febe904b5d39c15042b6ede65d9c6dab9f9a61b27be42df351e5a79185ecf3081287585273de56349f7e448099efcede983ee60f0fb71943efb599b58dc7443df04b234de2e8c75c4ce7514eae64da1c3197f366f4a880b2e5f83ca48c9f7ed529f070f24b7677508aab9fa97b8956c277efc5a98094276ccc2544e265feb087b24630422cb7a4c2ce7de8841d64d1b2ac2431d121f43cd8fec56e120f196df241907c3e29f2be681aa0f6b69d44ba6cf12f80bd3ab3a217aea557d288169f7a64656c126c4a77b403db365efa87c1cab42333059852f7ee963e20999a5d47a7c26c14e2006bb673afb033a54b40914b6c4c22fb6ffce6ffb749a1194537c12434e3691527d7071af70661f310fe6e0bf377b4ee3e6647f38a24c9568f759e64041b20d643900fc579512c8707324410e5abfbe1bd328d918cd47dd6abc90dc9d145a690121542e8105a4b6c0fc7cf3b95f495d8384263acb9d5eb70d0d00c3b3828eeb23d505f493048c12c59901cf75b4efd403fe58cb67c0d1cfc0b2f48f98d2ba163d99cfa00f2e32edba28560f00b8f649e12781f5e856de53a4fc8df1716ac271a3a28c6a74a086e1cf3b96e79dc3fd4265623ef48cd5e1a6e22a214b005fc9c2fafdd0abdc4c681cb681e27d311085d3f9c307b6c177f4625b5d1bc525dacf1d0d3a059502f777feee0b7320ab3b64c89f80c1", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001c40)={&(0x7f0000000180)={0xa, 0x0, 0x8001, @remote}, 0x1c, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="3a02bb18c510862478d02bc1291f40099db7f7fee66929bb78461bd3bf2ad831677428e72ae8706530db3b8b6961368885080f03c527d7a9fc582906", 0x3c}, {&(0x7f0000000a40)="9469c705e0d83ef1b3fc112ca3c715c54589412e25", 0x15}, {0x0}, {&(0x7f0000001a80)}], 0x9}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 03:35:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:29 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") capget(&(0x7f0000000000)={0x20071026}, 0x0) 03:35:30 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket(0x0, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffe2e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=""/1, 0x1}}, 0x10) semtimedop(r4, &(0x7f0000000400)=[{0x3, 0x6, 0x800}], 0x2aaaaaaaaaaaab85, &(0x7f0000000900)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd1d) getitimer(0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'nlmon0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="e6bcc6666f06b05f4599f3a5b40fcbe8f26adfa1da9c4dc9680ba9ef85ada2dc683a5fd76c5d2530") r5 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000040)) 03:35:30 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)) 03:35:30 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$int_out(r1, 0x5462, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe99) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self\x00', 0x8200, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, 0x0, 0xfffffffffffffe4c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffff9) ioctl$FIBMAP(r0, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0xfffffffffffffed5) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000180)=0x10000000003e, 0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000640)="08eae0c7db7c776288d7c98b4f1b4f1876b6ca04b154924cfe42230c65e4ceec8ffac362bff980f1192661181ee28bb87297db240e4d4f8fcc0f7a5824b1c07cba3171da02231542f0910ed1e92ebbac379474d41b20116578a86c87f60cce24ae49ad902d8ba0a73c341fa8f6d498664a541077f7474ed889a08ceaf2403200424fdecd22054994a24f45f815f303c0f65de2a39008d4e8580bc8c217d86fad1de34b", 0xa3, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) 03:35:30 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7047, 0x109000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = semget$private(0x0, 0x3, 0x5) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000000c0)=""/180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000580)="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", 0xfffffffffffffd69, 0x50, 0x0, 0xffffffef) 03:35:30 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) tee(r1, r0, 0x100000001, 0x0) 03:35:30 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket(0x0, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffe2e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=""/1, 0x1}}, 0x10) semtimedop(r4, &(0x7f0000000400)=[{0x3, 0x6, 0x800}], 0x2aaaaaaaaaaaab85, &(0x7f0000000900)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd1d) getitimer(0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'nlmon0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="e6bcc6666f06b05f4599f3a5b40fcbe8f26adfa1da9c4dc9680ba9ef85ada2dc683a5fd76c5d2530") r5 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000040)) 03:35:30 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)) 03:35:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x2000000000071, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000200)=""/231, 0x4, 0x0) 03:35:30 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)) 03:35:30 executing program 0: prctl$PR_MCE_KILL(0x23, 0x0, 0xfffffffffffffffc) 03:35:30 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket(0x0, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffe2e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=""/1, 0x1}}, 0x10) semtimedop(r4, &(0x7f0000000400)=[{0x3, 0x6, 0x800}], 0x2aaaaaaaaaaaab85, &(0x7f0000000900)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd1d) getitimer(0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'nlmon0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="e6bcc6666f06b05f4599f3a5b40fcbe8f26adfa1da9c4dc9680ba9ef85ada2dc683a5fd76c5d2530") r5 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000040)) 03:35:31 executing program 0: prctl$PR_MCE_KILL(0x23, 0x0, 0xfffffffffffffffc) 03:35:31 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)) 03:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:31 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) tee(r1, r0, 0x100000001, 0x0) 03:35:31 executing program 0: prctl$PR_MCE_KILL(0x23, 0x0, 0xfffffffffffffffc) 03:35:31 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket(0x0, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffe2e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=""/1, 0x1}}, 0x10) semtimedop(r4, &(0x7f0000000400)=[{0x3, 0x6, 0x800}], 0x2aaaaaaaaaaaab85, &(0x7f0000000900)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xd1d) getitimer(0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'nlmon0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="e6bcc6666f06b05f4599f3a5b40fcbe8f26adfa1da9c4dc9680ba9ef85ada2dc683a5fd76c5d2530") r5 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000040)) 03:35:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff7000/0x7000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) 03:35:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:31 executing program 0: prctl$PR_MCE_KILL(0x23, 0x0, 0xfffffffffffffffc) 03:35:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x8000451b, 0x0) 03:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000d) 03:35:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:32 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f6105000a000000fe02000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 0: symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:35:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff7000/0x7000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) 03:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404", 0xbd}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="426a45705ec53350aaa74eef11d62035c8d21c2bcb1c26759f32b08d7978bc2e2ac03256030b3107f472fc36db0f536f42aae97ceef6169f4ebd79c8696b", 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d406b98fe4e651768f6d10acced1cdd94142e8d6af3ec20a679b4cb6f97194ce7381825ba60b451754e457e8289fd373fa8bacd388f1a3049f8296d9eeb", 0x91}, {&(0x7f0000000700)='{', 0x1}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 03:35:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 593.226673][T29598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:35:32 executing program 0: symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:35:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/21, 0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:35:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 03:35:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x296, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xfe5e) 03:35:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 03:35:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x296, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xfe5e) 03:35:33 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r4 = socket$kcm(0x29, 0x5, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/186) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:35:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 03:35:33 executing program 0: symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:35:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff7000/0x7000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) 03:35:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x296, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xfe5e) 03:35:33 executing program 0: symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:35:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x200001000008912, &(0x7f0000000000)="1adca5055e0bcfe47bf070") shutdown(r2, 0x2) 03:35:33 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 03:35:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x296, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xfe5e) 03:35:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) 03:35:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3}, 0x2c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg$kcm(r2, &(0x7f0000002980)={&(0x7f0000000380)=@tipc=@name, 0x80, 0x0}, 0x0) 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x200001000008912, &(0x7f0000000000)="1adca5055e0bcfe47bf070") shutdown(r2, 0x2) 03:35:33 executing program 5: getrusage(0x55d320173f85276, 0x0) 03:35:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3}, 0x2c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg$kcm(r2, &(0x7f0000002980)={&(0x7f0000000380)=@tipc=@name, 0x80, 0x0}, 0x0) 03:35:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff7000/0x7000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) 03:35:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x200001000008912, &(0x7f0000000000)="1adca5055e0bcfe47bf070") shutdown(r2, 0x2) 03:35:34 executing program 5: syz_mount_image$nfs4(&(0x7f00000003c0)='nfs4\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='udp\x00') 03:35:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002900070000f1ffffffffffff04020000"], 0x14}}, 0x0) 03:35:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3}, 0x2c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg$kcm(r2, &(0x7f0000002980)={&(0x7f0000000380)=@tipc=@name, 0x80, 0x0}, 0x0) 03:35:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3}, 0x2c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg$kcm(r2, &(0x7f0000002980)={&(0x7f0000000380)=@tipc=@name, 0x80, 0x0}, 0x0) 03:35:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) 03:35:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffff206c9f3f, &(0x7f0000c91000)=""/34) 03:35:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x200001000008912, &(0x7f0000000000)="1adca5055e0bcfe47bf070") shutdown(r2, 0x2) 03:35:34 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 03:35:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffff206c9f3f, &(0x7f0000c91000)=""/34) 03:35:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffff206c9f3f, &(0x7f0000c91000)=""/34) 03:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000001600)=ANY=[@ANYBLOB="08000000000000000000004004000000010000007f00000001000000000000000700000000090000003f000000ff00000000000000010000800104000008000000000200000000000000000000070000c006000000ffff0000d1e3000000040000000000000b0000c00000000000800000ff2f4939352cff000000000000000019000082ff000000810c0000de7f00000500000000000008010000000917000004000000ffffffff"]) 03:35:35 executing program 1: unshare(0x20400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 03:35:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) 03:35:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002900070000f1ffffffffffff04020000"], 0x14}}, 0x0) 03:35:35 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 03:35:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x47) 03:35:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffff206c9f3f, &(0x7f0000c91000)=""/34) 03:35:35 executing program 1: unshare(0x20400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 03:35:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002900070000f1ffffffffffff04020000"], 0x14}}, 0x0) 03:35:35 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 03:35:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x47) 03:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000001600)=ANY=[@ANYBLOB="08000000000000000000004004000000010000007f00000001000000000000000700000000090000003f000000ff00000000000000010000800104000008000000000200000000000000000000070000c006000000ffff0000d1e3000000040000000000000b0000c00000000000800000ff2f4939352cff000000000000000019000082ff000000810c0000de7f00000500000000000008010000000917000004000000ffffffff"]) 03:35:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 03:35:35 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 03:35:35 executing program 1: unshare(0x20400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 03:35:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002900070000f1ffffffffffff04020000"], 0x14}}, 0x0) 03:35:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x47) 03:35:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 03:35:36 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) unshare(0x40000000) 03:35:36 executing program 1: unshare(0x20400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 03:35:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000001600)=ANY=[@ANYBLOB="08000000000000000000004004000000010000007f00000001000000000000000700000000090000003f000000ff00000000000000010000800104000008000000000200000000000000000000070000c006000000ffff0000d1e3000000040000000000000b0000c00000000000800000ff2f4939352cff000000000000000019000082ff000000810c0000de7f00000500000000000008010000000917000004000000ffffffff"]) 03:35:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x47) 03:35:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 03:35:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffbfffffffa0, &(0x7f0000000280)="2c749ae2298300000d4324ff50037597467dbecb72373ebe35c1b60dc81f4d8d5bcd793e73") 03:35:36 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:35:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setsig(r1, 0xa, 0x0) 03:35:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000001600)=ANY=[@ANYBLOB="08000000000000000000004004000000010000007f00000001000000000000000700000000090000003f000000ff00000000000000010000800104000008000000000200000000000000000000070000c006000000ffff0000d1e3000000040000000000000b0000c00000000000800000ff2f4939352cff000000000000000019000082ff000000810c0000de7f00000500000000000008010000000917000004000000ffffffff"]) 03:35:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 03:35:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffbfffffffa0, &(0x7f0000000280)="2c749ae2298300000d4324ff50037597467dbecb72373ebe35c1b60dc81f4d8d5bcd793e73") [ 597.270237][T30183] IPVS: ftp: loaded support on port[0] = 21 03:35:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 03:35:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) unshare(0x40000000) [ 598.021242][T30183] IPVS: ftp: loaded support on port[0] = 21 03:35:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffbfffffffa0, &(0x7f0000000280)="2c749ae2298300000d4324ff50037597467dbecb72373ebe35c1b60dc81f4d8d5bcd793e73") 03:35:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newspdinfo={0x1c, 0x24, 0x201, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8}]}, 0x1c}}, 0x0) 03:35:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={r1}, 0x8) 03:35:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bond_slave_0\x00\x00\x00\x01', {0x2, 0x0, @loopback=0x7f000000}}) 03:35:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffbfffffffa0, &(0x7f0000000280)="2c749ae2298300000d4324ff50037597467dbecb72373ebe35c1b60dc81f4d8d5bcd793e73") 03:35:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={r1}, 0x8) 03:35:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000006840), 0xc, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="004003000a000200aaaaaaaaaaaa0000"], 0xec}}, 0x0) 03:35:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={r1}, 0x8) 03:35:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) [ 598.670894][T30261] syz_tun: FDB only supports static addresses 03:35:39 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) unshare(0x40000000) 03:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bond_slave_0\x00\x00\x00\x01', {0x2, 0x0, @loopback=0x7f000000}}) 03:35:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={r1}, 0x8) 03:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) unshare(0x40000000) 03:35:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bond_slave_0\x00\x00\x00\x01', {0x2, 0x0, @loopback=0x7f000000}}) 03:35:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@loopback, @empty}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/47}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/132, 0x4000000000000}, {&(0x7f0000000980)=""/250}, {&(0x7f0000000880)=""/135}, {&(0x7f0000000a80)=""/238}]}}, {{&(0x7f0000000b80)=@ipx, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/51}], 0x0, &(0x7f0000000c40)=""/150}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d00)=""/227}, {&(0x7f0000000e00)=""/168}, {&(0x7f0000000ec0)=""/209}, {&(0x7f0000000fc0)=""/4096}, {&(0x7f0000001fc0)=""/127}, {&(0x7f0000002040)=""/76}, {&(0x7f00000020c0)=""/244}, {&(0x7f00000021c0)=""/168}], 0x0, &(0x7f0000002300)=""/4096}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003300)=""/192}, {&(0x7f00000033c0)=""/96, 0x2cb}, {&(0x7f0000003440)=""/89}, {&(0x7f00000034c0)=""/193}, {&(0x7f00000035c0)=""/99}, {&(0x7f0000003640)=""/180}, {&(0x7f0000003700)=""/116}], 0x0, &(0x7f0000003800)=""/226}}], 0x2f7, 0x0, 0x0) 03:35:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x3f, 0x0, "9f11ebcd0bf1474bb0954572c05b609c9d1c109d76a2c8d72747b2efce0db5948594ddd4a3b3dffbc73aedc4e460f3d4d0b4b164473122804ccc4a017a3d5bf06d81ee4c7aae0ce430974dc836f33bc4"}, 0x281) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @initdev}}, 0x0, 0x2, 0x0, "dd5fb082f55180165b4ee2c7c5968a119cf34a0ad970281b5cabcd541ff626edc3abdc36c7ba10fa6dd77926fb0fe683de7ceddf6a5c914d50d6738e19d464405c140beb9650d80b7a511c2264e8c71c"}, 0xd8) close(r0) 03:35:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bond_slave_0\x00\x00\x00\x01', {0x2, 0x0, @loopback=0x7f000000}}) [ 602.666809][T30422] IPVS: ftp: loaded support on port[0] = 21 03:35:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 03:35:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001840)=[{&(0x7f0000000000)="3143e4a60a37681f842bf6f9234db045e5fa75bc32ded5220bc53baa744f045de9eb42b0d9ac2a10084a892a09241e6a6185d84f94904d90984b9880279e6bdf470dc70ca389cb5fb1d08fbe1a7faabb75094fac95b1665039738bec6574b63cad6246", 0x63}, {&(0x7f0000000200)="690a2193ced3ce8994563de63ae896ef06e2bf9af7923491785bc396d1b5299cfe01ed6a1072a67e5700e62ffce9c0e817f037a00e2e9b841e124ee06ce932a3c0ad1bfb80ef3a3e2e7dbbfa0c0fb9eade9c9f7b194321388d5d479cc6996edcf7faf3a1114a1aec1305a05576cd7c7676e830895c31057ce29682959afcca420a277c816de0330823ad8362b5896295b8960dc2617e24f0d4ef37f6f3f7214baf4b9d5b45744e6c804b9f", 0xab}, {&(0x7f0000000500)="d0ea93de96f8ee2e9ecda07e5c4a0cd664b3b62fd0f84db11c09a5093ef7685327aff40692e1552ab330978d894e59b140e428b7610b0189c6a2bf7c58b7ae73016cb90afcc3668cfa162f187b6be8d4f284e75ea4da304bd42780fed7172497aedabf823fec1f237173701060c2595c9bfd81f0e71298e4ee75a9af9b1351ff6717bad401440946cd05a502d0d24eb8db045ade3e8a0283c70be57aaa59c8669a16f98fd922a64ae10c18bb", 0xac}, {&(0x7f00000005c0)="227052393bcbf14265a0ba492f90a9d76b74142eadc56b7dd084debe2e42213e7fc3c8d5a020de4cf5337b266a97aec0948c104d41bcc2c3bf827d9654d8b83ee0f8bddc5d2b98c632767b6e3c4c2eb23cb6016d1a0afac637542010ca629b694b8fcc395c4d62e0e683c1d0271eb47212a60f429d0968fa0f10c1d4fa44ae22aff49e6b77d6d283c57c6c7d2672f2787632f3077dbe1dda68a04b06f1bf3d5db9ab698b3e36f3bd89d9aa5b1513f0", 0xaf}, {&(0x7f0000000680)="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", 0xd98}], 0x5, 0x0) 03:35:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x100000000805, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r1 = socket$alg(0x26, 0x5, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x39b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa5e9d9685d2425da5e9be000000002990005a62132ab63aefef3652262e00000000e026dcfb6367e3cccefea547c9940af19211000001"], &(0x7f0000000040)) 03:35:42 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='ceph\x00\x95\x88\xbc\x1ag\xdb\xb3\x19\xc1\xd7\xcdd.\x9c\xad\x9f\n\xdbRn\x8f\xf8\xa7#\xd6I\xee%,\x8a\xed-C\xaa\xe5;\x82\xc4R\x80\xe0=\xfd.\xd8T\x1c\xf7Ij\x86su\xcd\xdb\xebr\xdd_=%T6\xc5\x04}\xc9\x86E\xd59-\xb6\xa7\xd7\x1e\x1a\xf4\xcd\x9fu\xf4\x8b%M*-', 0x0, &(0x7f0000000080)="000000007cfa000000000000", 0xc, r0) 03:35:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 03:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x81000000c2, 0x0) 03:35:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x36, 0x829, 0x0, 0x0, {0x2, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xfeffffff00000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 03:35:42 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:42 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000080)) 03:35:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 03:35:42 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000060) [ 603.457950][T30667] netlink: zone id is out of range 03:35:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) [ 603.504338][T30667] netlink: del zone limit has 4 unknown bytes 03:35:42 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7361c86d2000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x660}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:35:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000060) 03:35:43 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 03:35:43 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000080)) 03:35:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7361c86d2000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x660}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:35:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000060) 03:35:43 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:43 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000080)) 03:35:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7361c86d2000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x660}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:35:43 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000060) 03:35:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7361c86d2000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x660}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:35:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:43 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:44 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000080)) 03:35:44 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:44 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2(0x0, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) 03:35:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000300)) 03:35:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7e, 0x0, [0x17b], [0xc1]}) 03:35:44 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11") r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000004c0)="d3", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r1}, &(0x7f00000001c0)=""/238, 0xee, &(0x7f0000000300)={&(0x7f00000002c0)={'crc32\x00'}}) 03:35:44 executing program 3: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x277) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 03:35:45 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:45 executing program 4: msgget$private(0x0, 0x0) mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(0x0, &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x705, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), 0x0, r0}, 0x68) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x2, 0x0, 0x0, &(0x7f0000000800)}) 03:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7e, 0x0, [0x17b], [0xc1]}) 03:35:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000300)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xf0}) acct(&(0x7f0000000040)='./file1\x00') [ 605.999102][T30877] Process accounting resumed 03:35:45 executing program 3: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x277) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 03:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7e, 0x0, [0x17b], [0xc1]}) [ 606.195982][T30877] Process accounting resumed [ 606.272587][ T26] audit: type=1804 audit(2000000145.529:125): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir275824454/syzkaller.DOH4ju/646/file1" dev="sda1" ino=17073 res=1 03:35:45 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:45 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 03:35:45 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x94) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x17a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) flock(0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000a80), 0x8, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close(0xffffffffffffffff) 03:35:45 executing program 3: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x277) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 03:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7e, 0x0, [0x17b], [0xc1]}) 03:35:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=@raw=[@initr0, @exit, @generic, @call, @exit], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4d) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 03:35:46 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x8}, 0x4) 03:35:46 executing program 3: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x277) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 03:35:46 executing program 4: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 03:35:46 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 607.281950][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.329297][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.362673][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.405088][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.450077][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.476964][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.502040][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.525996][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 03:35:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2, &(0x7f0000004780)=""/245, 0xf5, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 607.597436][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.648157][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.691897][ T9052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 607.761155][ T9052] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 03:35:47 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x6, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) semget$private(0x0, 0x5, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x70c, 0x20007ffc) 03:35:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60fc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) 03:35:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x8}, 0x4) 03:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2, &(0x7f0000004780)=""/245, 0xf5, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 607.953476][ T26] audit: type=1804 audit(2000000147.209:126): pid=31225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir275824454/syzkaller.DOH4ju/649/file0/file0" dev="sda1" ino=17215 res=1 03:35:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x2}, 0xe) [ 608.284289][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.291838][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.357812][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 03:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2, &(0x7f0000004780)=""/245, 0xf5, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 608.410339][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.465642][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.527441][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.566804][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 03:35:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x2}, 0xe) 03:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32, @ANYBLOB="02c602000c000200040000aaaaaa00008e3cbaa17e304526dd245749761844076ae5414e8df7b35e88ea9878f2bfb58c6e71089e02108bfa122e0a518a06d0daf9528d5e44b39a2e"], 0x28}}, 0x40080) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'gretap0\x00', 0x5100}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1}, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)="7ed424af3287824e559b4a6fffc495f8beaaab09396fe18547168f6c1e20d845c9ed36df588f80cbbc6bde92df2e11a0e6a7f7e84b6266516f3d5b44957aa45f8f7ac1c232165705866f08e2a645213b969f4c758c7d99ef4c576b111fec1777f8b4eb9616c5aaa4942591b45fbeca60546d206a93a6cfbd8893536df550b78d27365e4a0e27c459d6379f4ef3bf0729c968754906305ef2b2863f1368456317742515e431d0b5d75e20330b1ef94c014d2f090c645e9f2d77b6f4dd710b88116974b9913f6e6c5b70eddb9d25114182d875fcc9a431d138142a228889534b9a3fdc0af15b4810aa", 0xe8}, {&(0x7f0000000700)="e460842df14e74c79c9946efb62dd36160f9947abc015b2cedb21cc2010ab02eedde424c8b9d6109c8663946e5e799d4dcb997c7db7c09221ebb8307b23582ceecf8e84ca5d9ed21d898368d2e043cdb00", 0x51}, {&(0x7f0000000780)="e148418e196fc6dd50af1d7e9f02bf0f3651aab5889a9c48d219c05ff5e797477fd7ead6f01df808edd78353d6a1f824638abeec1303966ebce213f270f6b8fb09d8ddc63506a4ccb61324349ea1a107e8bb38c5d4e538fbaa2c8c7453c2ae8389ad80f56c169d74a703a01fb5d52d9cff222b1abb10453f5cb292b52494135aa434ea3ff17a7b120363d934052b3170e9cc41ec1e260f6337a73e435942d1bb65543953a7e4c973697bcceb8e58b635ddead008769765173bf6b38a644ca6e745667489abcd69fcc7154d066c7ff2e07b", 0xd1}, {&(0x7f0000000880)="385110bbf079c1a40c5feaca5df4121a9a07d4a6a255d5757201cbd94ab4f205ecc2ed5540c65fa556754b34e6e5b6f81234e146381f9abcfac2fe9f23045874c161553ec5ea56292799b6b02beeebf84ea3b29059ebd9d2d7a92c21f8ed6c3e8f26581b07", 0x65}], 0x4}}], 0x1, 0x40) [ 608.599162][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 03:35:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 608.644282][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.678057][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 608.718438][T22252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 03:35:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2, &(0x7f0000004780)=""/245, 0xf5, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:35:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x2}, 0xe) [ 608.786683][T31367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.797783][T22252] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 03:35:48 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x8}, 0x4) [ 609.090076][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.141261][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.177243][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.205439][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.239167][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.262242][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.280750][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.313705][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 03:35:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) 03:35:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000301010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) 03:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32, @ANYBLOB="02c602000c000200040000aaaaaa00008e3cbaa17e304526dd245749761844076ae5414e8df7b35e88ea9878f2bfb58c6e71089e02108bfa122e0a518a06d0daf9528d5e44b39a2e"], 0x28}}, 0x40080) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'gretap0\x00', 0x5100}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1}, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)="7ed424af3287824e559b4a6fffc495f8beaaab09396fe18547168f6c1e20d845c9ed36df588f80cbbc6bde92df2e11a0e6a7f7e84b6266516f3d5b44957aa45f8f7ac1c232165705866f08e2a645213b969f4c758c7d99ef4c576b111fec1777f8b4eb9616c5aaa4942591b45fbeca60546d206a93a6cfbd8893536df550b78d27365e4a0e27c459d6379f4ef3bf0729c968754906305ef2b2863f1368456317742515e431d0b5d75e20330b1ef94c014d2f090c645e9f2d77b6f4dd710b88116974b9913f6e6c5b70eddb9d25114182d875fcc9a431d138142a228889534b9a3fdc0af15b4810aa", 0xe8}, {&(0x7f0000000700)="e460842df14e74c79c9946efb62dd36160f9947abc015b2cedb21cc2010ab02eedde424c8b9d6109c8663946e5e799d4dcb997c7db7c09221ebb8307b23582ceecf8e84ca5d9ed21d898368d2e043cdb00", 0x51}, {&(0x7f0000000780)="e148418e196fc6dd50af1d7e9f02bf0f3651aab5889a9c48d219c05ff5e797477fd7ead6f01df808edd78353d6a1f824638abeec1303966ebce213f270f6b8fb09d8ddc63506a4ccb61324349ea1a107e8bb38c5d4e538fbaa2c8c7453c2ae8389ad80f56c169d74a703a01fb5d52d9cff222b1abb10453f5cb292b52494135aa434ea3ff17a7b120363d934052b3170e9cc41ec1e260f6337a73e435942d1bb65543953a7e4c973697bcceb8e58b635ddead008769765173bf6b38a644ca6e745667489abcd69fcc7154d066c7ff2e07b", 0xd1}, {&(0x7f0000000880)="385110bbf079c1a40c5feaca5df4121a9a07d4a6a255d5757201cbd94ab4f205ecc2ed5540c65fa556754b34e6e5b6f81234e146381f9abcfac2fe9f23045874c161553ec5ea56292799b6b02beeebf84ea3b29059ebd9d2d7a92c21f8ed6c3e8f26581b07", 0x65}], 0x4}}], 0x1, 0x40) 03:35:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000001, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x2}, 0xe) 03:35:48 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 609.358155][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.382648][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.444560][T22252] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 609.461164][T31395] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 609.495640][T22252] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 03:35:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0x9990) 03:35:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x7}, 0x8) 03:35:48 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="9cffffffffffba00009b80008100", 0xe}], 0x1}, 0x0) 03:35:48 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280)={0x8}, 0x4) [ 609.648733][T31401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:49 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 03:35:49 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000480)={0x2, 0x0, @initdev}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000b80)="a2", 0x1}], 0x1}}], 0x2, 0x0) 03:35:49 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) 03:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32, @ANYBLOB="02c602000c000200040000aaaaaa00008e3cbaa17e304526dd245749761844076ae5414e8df7b35e88ea9878f2bfb58c6e71089e02108bfa122e0a518a06d0daf9528d5e44b39a2e"], 0x28}}, 0x40080) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'gretap0\x00', 0x5100}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1}, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)="7ed424af3287824e559b4a6fffc495f8beaaab09396fe18547168f6c1e20d845c9ed36df588f80cbbc6bde92df2e11a0e6a7f7e84b6266516f3d5b44957aa45f8f7ac1c232165705866f08e2a645213b969f4c758c7d99ef4c576b111fec1777f8b4eb9616c5aaa4942591b45fbeca60546d206a93a6cfbd8893536df550b78d27365e4a0e27c459d6379f4ef3bf0729c968754906305ef2b2863f1368456317742515e431d0b5d75e20330b1ef94c014d2f090c645e9f2d77b6f4dd710b88116974b9913f6e6c5b70eddb9d25114182d875fcc9a431d138142a228889534b9a3fdc0af15b4810aa", 0xe8}, {&(0x7f0000000700)="e460842df14e74c79c9946efb62dd36160f9947abc015b2cedb21cc2010ab02eedde424c8b9d6109c8663946e5e799d4dcb997c7db7c09221ebb8307b23582ceecf8e84ca5d9ed21d898368d2e043cdb00", 0x51}, {&(0x7f0000000780)="e148418e196fc6dd50af1d7e9f02bf0f3651aab5889a9c48d219c05ff5e797477fd7ead6f01df808edd78353d6a1f824638abeec1303966ebce213f270f6b8fb09d8ddc63506a4ccb61324349ea1a107e8bb38c5d4e538fbaa2c8c7453c2ae8389ad80f56c169d74a703a01fb5d52d9cff222b1abb10453f5cb292b52494135aa434ea3ff17a7b120363d934052b3170e9cc41ec1e260f6337a73e435942d1bb65543953a7e4c973697bcceb8e58b635ddead008769765173bf6b38a644ca6e745667489abcd69fcc7154d066c7ff2e07b", 0xd1}, {&(0x7f0000000880)="385110bbf079c1a40c5feaca5df4121a9a07d4a6a255d5757201cbd94ab4f205ecc2ed5540c65fa556754b34e6e5b6f81234e146381f9abcfac2fe9f23045874c161553ec5ea56292799b6b02beeebf84ea3b29059ebd9d2d7a92c21f8ed6c3e8f26581b07", 0x65}], 0x4}}], 0x1, 0x40) 03:35:49 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 03:35:49 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f00000004c0)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r0, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xffffffcc, 0x0, &(0x7f0000000300)=[@clear_death, @free_buffer, @exit_looper, @acquire, @acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x6}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1e3, 0x0, &(0x7f0000000400)}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ff) 03:35:49 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x1ff, 0x7fff, 0x50000, 0x8, 0x3, 0x32}, 0xfffffffffffffe00}, 0xa) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000025c0)=0x204, 0x4) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fstatfs(0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xdc0000}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x77359400}}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x80000080044dfd, &(0x7f0000000100)) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000000)=0x7) 03:35:49 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000480)={0x2, 0x0, @initdev}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000b80)="a2", 0x1}], 0x1}}], 0x2, 0x0) 03:35:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0x9990) 03:35:49 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 610.452829][T31457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32, @ANYBLOB="02c602000c000200040000aaaaaa00008e3cbaa17e304526dd245749761844076ae5414e8df7b35e88ea9878f2bfb58c6e71089e02108bfa122e0a518a06d0daf9528d5e44b39a2e"], 0x28}}, 0x40080) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'gretap0\x00', 0x5100}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1}, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)="7ed424af3287824e559b4a6fffc495f8beaaab09396fe18547168f6c1e20d845c9ed36df588f80cbbc6bde92df2e11a0e6a7f7e84b6266516f3d5b44957aa45f8f7ac1c232165705866f08e2a645213b969f4c758c7d99ef4c576b111fec1777f8b4eb9616c5aaa4942591b45fbeca60546d206a93a6cfbd8893536df550b78d27365e4a0e27c459d6379f4ef3bf0729c968754906305ef2b2863f1368456317742515e431d0b5d75e20330b1ef94c014d2f090c645e9f2d77b6f4dd710b88116974b9913f6e6c5b70eddb9d25114182d875fcc9a431d138142a228889534b9a3fdc0af15b4810aa", 0xe8}, {&(0x7f0000000700)="e460842df14e74c79c9946efb62dd36160f9947abc015b2cedb21cc2010ab02eedde424c8b9d6109c8663946e5e799d4dcb997c7db7c09221ebb8307b23582ceecf8e84ca5d9ed21d898368d2e043cdb00", 0x51}, {&(0x7f0000000780)="e148418e196fc6dd50af1d7e9f02bf0f3651aab5889a9c48d219c05ff5e797477fd7ead6f01df808edd78353d6a1f824638abeec1303966ebce213f270f6b8fb09d8ddc63506a4ccb61324349ea1a107e8bb38c5d4e538fbaa2c8c7453c2ae8389ad80f56c169d74a703a01fb5d52d9cff222b1abb10453f5cb292b52494135aa434ea3ff17a7b120363d934052b3170e9cc41ec1e260f6337a73e435942d1bb65543953a7e4c973697bcceb8e58b635ddead008769765173bf6b38a644ca6e745667489abcd69fcc7154d066c7ff2e07b", 0xd1}, {&(0x7f0000000880)="385110bbf079c1a40c5feaca5df4121a9a07d4a6a255d5757201cbd94ab4f205ecc2ed5540c65fa556754b34e6e5b6f81234e146381f9abcfac2fe9f23045874c161553ec5ea56292799b6b02beeebf84ea3b29059ebd9d2d7a92c21f8ed6c3e8f26581b07", 0x65}], 0x4}}], 0x1, 0x40) 03:35:49 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000480)={0x2, 0x0, @initdev}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000b80)="a2", 0x1}], 0x1}}], 0x2, 0x0) 03:35:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0x9990) 03:35:50 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000480)={0x2, 0x0, @initdev}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000b80)="a2", 0x1}], 0x1}}], 0x2, 0x0) [ 610.909934][T31558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xc, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x20000000, 0x0, 0x711000, 0x0}, 0x1d) 03:35:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:fixed_disk_device_t:s0\xfe', 0x9990) 03:35:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) 03:35:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x1ff, 0x7fff, 0x50000, 0x8, 0x3, 0x32}, 0xfffffffffffffe00}, 0xa) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000025c0)=0x204, 0x4) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fstatfs(0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xdc0000}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x77359400}}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x80000080044dfd, &(0x7f0000000100)) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000000)=0x7) 03:35:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0D\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003680)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, &(0x7f0000003540)=[{&(0x7f0000000340)="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", 0xe74}, {0x0, 0x21c}], 0x2}, 0x0) [ 616.175957][T31976] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 03:35:55 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x61d9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 03:35:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x5, 0x2000000000000080, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000540)}, 0x10) 03:35:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) [ 616.519072][T31979] device nr0 entered promiscuous mode 03:35:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:56 executing program 5: clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x4004000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) wait4(r2, 0x0, 0x80000000, 0x0) 03:35:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x61d9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30000c, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:35:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000640)) timer_delete(0x0) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30000c, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:35:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) 03:35:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r1) 03:35:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000640)) timer_delete(0x0) [ 617.784191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 617.790038][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30000c, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000640)) timer_delete(0x0) 03:35:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30000c, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000640)) timer_delete(0x0) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:35:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c00810ee00f80ecdb4cb90402c804a012000000040090fb120001000e10da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 618.504206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 618.510090][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) 03:35:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) 03:35:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\xb3\xcb\x10\xe0!\x18?\xc4\v\x91E\xd2\xaa\xb6\xfc,\xceI\xa6r\xf4!\x80GuvE\x1brD\xc8d\bq\x1d\xeaCYxO,\x06J\xc5|p\xde\xf9x\x91\x84\x86\x9eG\xbek\x85\xcb\xf9\xf9\xb2Pl\xf8\xd3H\x88\xbc\x88oM^\xc9\xc8\x05\x8d\xb7\x85\xd9m\x1668\x047\xca\xc2\xd1\x10\xfa\xa3\xc4o%\xdeq\xe6\xa6\xac\xe1\xc9\x98\xf0\x8fd\xab\r\xde\x1df\xe7\x81`(\xd5#\xb0\xfee\xb30\x01\xbc\xb9J\x8e`M8I\xb7\xb5\xb5\xa0\xe4\xfc\xc0(7q\xa0%\xf7hw\xa5.\xf5\x12Tlq\x9a\x1b5\xcdJL\xa3\xef,I\xcf\xee\xceb \x96J\xda\xe3\xa8\xae\xa9w^~\xaa\b\xd9\xdfD\x13\xe0\xc4;\xb6)\xab\xbb\x86\x98\xe7\\\'\xbeu+\x82') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000180)="5cb2d4148029e8d97c31ff175fc869c2dbed3186b113b10b9bedc87bdbabff68", 0x20}], 0x1) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/60, 0x3c}], 0x2}}], 0x1, 0x0, 0x0) 03:35:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_delroute={0x30, 0x19, 0xc05, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr="000000000000ffffff9e00"}]}, 0x30}}, 0x0) 03:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="c6", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, 0x0, 0x0, 0x0) 03:35:59 executing program 4: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 03:35:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my}, 0x10, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x34, 0x0, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1311}]}]}, 0x34}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="c6", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, 0x0, 0x0, 0x0) 03:35:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_delroute={0x30, 0x19, 0xc05, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr="000000000000ffffff9e00"}]}, 0x30}}, 0x0) 03:35:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 03:35:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:35:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 03:35:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.descendants\x00?\x8c\xf7\x87\b6\x04\x14\xa1\xd3\xbf\xa2\x8f\xcel\'\xe9\'\xe8\xb9e\xf0\x145\xeagK\x1cDk\xee\x99\xf1\xc0\x12\x01\x03s\xa2\xcco\xb6\a\xb7}\x97\xc4\xc8\x8e\xa8c\xbd#(\x1f\xf4P\x85\xd5w<\xd5Gg\x97b\xce\'he\x97/\xbcP\x00s\xbc\xe3BS^\x02\x84\xca9\xf8\xabo\xcecAl\xd2\xfc.]pL\xa4\x9d\xf8\xd7\xe4\x13]QsM\x9c\xfd\xc5\xd2\xc5V\xb4{\xa0f\x041\x94A`\xce<{\xbb\xe8[\n/\xa4y8\x9d\xb8yO3\xdfk!Ty\x03j\xf1\x9c\xd9\x1bn\x8f}\a\xe2S\xde\xcb/\xc9\x9a\xe5\x17\xbfM\xc6\xc3{\xe3\xd8\x82\xa9ak\x88\xe2\xd6\x97\xac\xf9i\xca\xf2\xfc\xc4R\x8a\xa8\r\xa3o\xf2JR\xfdk\x0f4\xdd', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 03:36:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 03:36:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my}, 0x10, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x34, 0x0, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1311}]}]}, 0x34}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 03:36:00 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3312, 0x0) 03:36:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:36:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:36:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 03:36:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 03:36:00 executing program 0: sysfs$2(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x4}}, 0x3ff, 0x7, 0x6, 0x4}, &(0x7f0000000380)=0x98) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x02\x01\xd8\x00H\x00'}) connect$pptp(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x2, {0x0, @remote}}, 0x1e) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 03:36:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:36:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 03:36:01 executing program 5: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000040)=0x5, 0x401c, 0x0) get_mempolicy(0x0, &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 03:36:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) [ 621.854479][ T342] device bridge0 entered promiscuous mode [ 621.898225][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.907870][ T336] bridge0: port 1(bridge_slave_0) entered disabled state 03:36:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:36:01 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="ddc51d939f05", @dev, [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @loopback, @broadcast, @initdev}}}}, 0x0) [ 621.997341][ T336] device bridge0 left promiscuous mode 03:36:01 executing program 5: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000040)=0x5, 0x401c, 0x0) get_mempolicy(0x0, &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 03:36:01 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) 03:36:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@raw=[@alu, @generic, @call], &(0x7f0000000040)='OPL\x001X\xd8B0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000230029080000000000000000040000000c0016009357750853000000"], 0x20}}, 0x0) 03:36:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 625.356578][ T466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000230029080000000000000000040000000c0016009357750853000000"], 0x20}}, 0x0) 03:36:04 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) creat(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) shmat(0x0, &(0x7f0000c94000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 03:36:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff7000/0x7000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) [ 625.370753][ T469] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 625.443300][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.458650][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.468142][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.476056][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state 03:36:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 625.633305][ T471] device bridge0 entered promiscuous mode [ 625.692909][ T485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:05 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000230029080000000000000000040000000c0016009357750853000000"], 0x20}}, 0x0) 03:36:05 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:05 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:05 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) creat(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) shmat(0x0, &(0x7f0000c94000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 03:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000230029080000000000000000040000000c0016009357750853000000"], 0x20}}, 0x0) [ 625.987429][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="f004519676a8"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x100000000014, &(0x7f0000000340)=0x2, 0x4) io_setup(0x1e, &(0x7f00000000c0)=0x0) io_submit(r3, 0x300, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x29c}]) 03:36:05 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:05 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) creat(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) shmat(0x0, &(0x7f0000c94000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 03:36:05 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) msgctl$IPC_INFO(0x0, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000280)) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sysfs$1(0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) ftruncate(r4, 0x200004) r5 = getuid() lsetxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x100000001}, {0x8001, 0x748}], r5}, 0x18, 0x2) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 03:36:05 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:05 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:05 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="f004519676a8"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x100000000014, &(0x7f0000000340)=0x2, 0x4) io_setup(0x1e, &(0x7f00000000c0)=0x0) io_submit(r3, 0x300, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x29c}]) 03:36:06 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:06 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) creat(0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) shmat(0x0, &(0x7f0000c94000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 03:36:06 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f0000000140)=0x9) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f0000000200)) preadv(r3, &(0x7f0000000100), 0x2df, 0x0) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 03:36:06 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) msgctl$IPC_INFO(0x0, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000280)) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sysfs$1(0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) ftruncate(r4, 0x200004) r5 = getuid() lsetxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x100000001}, {0x8001, 0x748}], r5}, 0x18, 0x2) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 03:36:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="f004519676a8"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x100000000014, &(0x7f0000000340)=0x2, 0x4) io_setup(0x1e, &(0x7f00000000c0)=0x0) io_submit(r3, 0x300, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x29c}]) 03:36:06 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:06 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:06 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:06 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) stat(&(0x7f0000000780)='./control/file0\x00', 0x0) getegid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000004000)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:36:06 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="f004519676a8"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x100000000014, &(0x7f0000000340)=0x2, 0x4) io_setup(0x1e, &(0x7f00000000c0)=0x0) io_submit(r3, 0x300, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x29c}]) 03:36:06 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0xffffffffffffff0e, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 03:36:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup3(r1, r0, 0x0) [ 627.761538][ T686] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 03:36:07 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) msgctl$IPC_INFO(0x0, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000280)) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sysfs$1(0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) ftruncate(r4, 0x200004) r5 = getuid() lsetxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x100000001}, {0x8001, 0x748}], r5}, 0x18, 0x2) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 03:36:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 627.877943][ T686] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 03:36:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000021002d36036205001a00e2249a9304000000e600001000e03c00f06d936c2fb34fdd10517065"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 03:36:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:07 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) stat(&(0x7f0000000780)='./control/file0\x00', 0x0) getegid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000004000)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 628.182468][ T708] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 628.192305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 628.192630][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:36:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000021002d36036205001a00e2249a9304000000e600001000e03c00f06d936c2fb34fdd10517065"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 03:36:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000021002d36036205001a00e2249a9304000000e600001000e03c00f06d936c2fb34fdd10517065"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 03:36:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000021002d36036205001a00e2249a9304000000e600001000e03c00f06d936c2fb34fdd10517065"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 03:36:08 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) stat(&(0x7f0000000780)='./control/file0\x00', 0x0) getegid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000004000)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:36:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:36:08 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) msgctl$IPC_INFO(0x0, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000280)) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sysfs$1(0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) ftruncate(r4, 0x200004) r5 = getuid() lsetxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x100000001}, {0x8001, 0x748}], r5}, 0x18, 0x2) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) [ 629.063487][ T829] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 03:36:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 629.209507][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 629.308035][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 629.317114][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.327304][ T9059] Call Trace: [ 629.330617][ T9059] dump_stack+0x172/0x1f0 [ 629.334962][ T9059] dump_header+0x10b/0x82d [ 629.339481][ T9059] ? oom_kill_process+0x94/0x3f0 [ 629.344432][ T9059] oom_kill_process.cold+0x10/0x15 [ 629.349554][ T9059] out_of_memory+0x79a/0x12c0 [ 629.354247][ T9059] ? lock_downgrade+0x920/0x920 [ 629.359128][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 629.364941][ T9059] ? oom_killer_disable+0x280/0x280 [ 629.367476][ T839] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 629.370158][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 629.370194][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 629.370216][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 629.370233][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 629.370253][ T9059] try_charge+0x1080/0x1480 [ 629.370278][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 629.370293][ T9059] ? find_held_lock+0x35/0x130 [ 629.370311][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 629.370335][ T9059] ? lock_downgrade+0x920/0x920 [ 629.370349][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 629.370369][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 629.370384][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 629.370404][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 629.370430][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 629.452838][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 629.458217][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 629.464481][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 629.470214][ T9059] ? copy_process+0x46d1/0x6b00 [ 629.475081][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 629.480390][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 629.485455][ T9059] ? __kasan_check_read+0x11/0x20 [ 629.490501][ T9059] copy_process+0x3f8/0x6b00 [ 629.495110][ T9059] ? __kasan_check_read+0x11/0x20 [ 629.500148][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 629.505179][ T9059] ? __kasan_check_read+0x11/0x20 [ 629.510213][ T9059] ? mark_lock+0xc0/0x11e0 [ 629.514648][ T9059] ? __cleanup_sighand+0x60/0x60 [ 629.519599][ T9059] ? find_held_lock+0x35/0x130 [ 629.524393][ T9059] _do_fork+0x146/0xfa0 [ 629.528565][ T9059] ? copy_init_mm+0x20/0x20 [ 629.533087][ T9059] ? __kasan_check_read+0x11/0x20 [ 629.538144][ T9059] ? _copy_to_user+0x118/0x160 [ 629.542927][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 629.549179][ T9059] ? put_timespec64+0xda/0x140 [ 629.553963][ T9059] __x64_sys_clone+0x18d/0x250 [ 629.558743][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 629.563626][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 629.568932][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 629.573968][ T9059] do_syscall_64+0xfa/0x760 [ 629.578583][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.584480][ T9059] RIP: 0033:0x457dfa [ 629.588554][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 629.608177][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 629.616600][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 629.624586][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 629.632570][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 629.640552][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 629.648535][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 03:36:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 629.834681][ T9059] memory: usage 61192kB, limit 0kB, failcnt 8 [ 629.847348][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 629.885006][ T9059] Memory cgroup stats for /syz5: [ 629.885334][ T9059] anon 50692096 [ 629.885334][ T9059] file 32768 [ 629.885334][ T9059] kernel_stack 655360 [ 629.885334][ T9059] slab 8921088 [ 629.885334][ T9059] sock 0 [ 629.885334][ T9059] shmem 32768 [ 629.885334][ T9059] file_mapped 135168 [ 629.885334][ T9059] file_dirty 0 [ 629.885334][ T9059] file_writeback 0 [ 629.885334][ T9059] anon_thp 48234496 [ 629.885334][ T9059] inactive_anon 135168 [ 629.885334][ T9059] active_anon 50548736 [ 629.885334][ T9059] inactive_file 0 [ 629.885334][ T9059] active_file 53248 [ 629.885334][ T9059] unevictable 0 [ 629.885334][ T9059] slab_reclaimable 2703360 [ 629.885334][ T9059] slab_unreclaimable 6217728 [ 629.885334][ T9059] pgfault 67518 [ 629.885334][ T9059] pgmajfault 0 [ 629.885334][ T9059] workingset_refault 0 [ 629.885334][ T9059] workingset_activate 0 [ 629.885334][ T9059] workingset_nodereclaim 0 [ 629.885334][ T9059] pgrefill 63 [ 629.885334][ T9059] pgscan 33 [ 629.885334][ T9059] pgsteal 34 03:36:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 629.924616][ T842] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 03:36:09 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) stat(&(0x7f0000000780)='./control/file0\x00', 0x0) getegid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000004000)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 630.105005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 630.111717][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 630.118587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 630.124988][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 630.188443][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9259,uid=0 [ 630.213515][ T9059] Memory cgroup out of memory: Killed process 9259 (syz-executor.5) total-vm:72704kB, anon-rss:6292kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 630.260020][ T1054] oom_reaper: reaped process 9259 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 630.271642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.271698][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 630.283507][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 630.308072][ T852] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.328116][T10144] CPU: 0 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 630.337242][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.337249][T10144] Call Trace: [ 630.337273][T10144] dump_stack+0x172/0x1f0 [ 630.337293][T10144] dump_header+0x10b/0x82d [ 630.337305][T10144] ? oom_kill_process+0x94/0x3f0 [ 630.337322][T10144] oom_kill_process.cold+0x10/0x15 [ 630.337337][T10144] out_of_memory+0x79a/0x12c0 [ 630.337353][T10144] ? lock_downgrade+0x920/0x920 [ 630.337372][T10144] ? oom_killer_disable+0x280/0x280 [ 630.337399][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 630.337414][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 630.337436][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 630.337450][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 630.337469][T10144] try_charge+0x1080/0x1480 [ 630.410423][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 630.415979][T10144] ? find_held_lock+0x35/0x130 [ 630.420755][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 630.426319][T10144] ? lock_downgrade+0x920/0x920 [ 630.431178][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 630.436735][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 630.442202][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 630.447414][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 630.452974][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 630.458101][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 630.463483][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.469737][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 630.475474][T10144] ? copy_process+0x46d1/0x6b00 [ 630.480341][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 630.485642][T10144] ? trace_hardirqs_on+0x67/0x240 [ 630.490688][T10144] ? __kasan_check_read+0x11/0x20 [ 630.495733][T10144] copy_process+0x3f8/0x6b00 [ 630.500332][T10144] ? __kasan_check_read+0x11/0x20 [ 630.505369][T10144] ? __lock_acquire+0x1702/0x4c30 [ 630.510407][T10144] ? __kasan_check_read+0x11/0x20 [ 630.515445][T10144] ? mark_lock+0xc0/0x11e0 [ 630.519880][T10144] ? __cleanup_sighand+0x60/0x60 [ 630.524832][T10144] ? find_held_lock+0x35/0x130 [ 630.529629][T10144] _do_fork+0x146/0xfa0 [ 630.533802][T10144] ? copy_init_mm+0x20/0x20 [ 630.538316][T10144] ? __kasan_check_read+0x11/0x20 [ 630.543347][T10144] ? _copy_to_user+0x118/0x160 [ 630.548124][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 630.554371][T10144] ? put_timespec64+0xda/0x140 [ 630.559147][T10144] __x64_sys_clone+0x18d/0x250 [ 630.563927][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 630.568801][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 630.574098][T10144] ? trace_hardirqs_on+0x67/0x240 [ 630.579137][T10144] do_syscall_64+0xfa/0x760 [ 630.583656][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.589904][T10144] RIP: 0033:0x457dfa 03:36:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x32000, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 03:36:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x454d, 0xba, 0x0, 0x9, 0x0, 0x0, 0x0, 0x135, 0x38}, [{}]}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="020b0000000000100000000000a6c919563f42fa46"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 630.593805][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 630.613415][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 630.621833][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 630.629812][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 630.637875][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 630.645850][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 630.653822][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 03:36:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x32000, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 630.682871][T10144] memory: usage 106780kB, limit 0kB, failcnt 8 [ 630.716058][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 630.722997][T10144] Memory cgroup stats for /syz1: [ 630.723123][T10144] anon 100847616 [ 630.723123][T10144] file 184320 [ 630.723123][T10144] kernel_stack 262144 [ 630.723123][T10144] slab 6897664 [ 630.723123][T10144] sock 0 [ 630.723123][T10144] shmem 0 [ 630.723123][T10144] file_mapped 0 [ 630.723123][T10144] file_dirty 0 [ 630.723123][T10144] file_writeback 0 [ 630.723123][T10144] anon_thp 90177536 [ 630.723123][T10144] inactive_anon 70909952 [ 630.723123][T10144] active_anon 6680576 [ 630.723123][T10144] inactive_file 135168 [ 630.723123][T10144] active_file 135168 [ 630.723123][T10144] unevictable 23072768 03:36:10 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2f4, '\x004c'}, 0x4) [ 630.723123][T10144] slab_reclaimable 1892352 [ 630.723123][T10144] slab_unreclaimable 5005312 [ 630.723123][T10144] pgfault 63228 [ 630.723123][T10144] pgmajfault 0 [ 630.723123][T10144] workingset_refault 0 [ 630.723123][T10144] workingset_activate 0 [ 630.723123][T10144] workingset_nodereclaim 0 [ 630.723123][T10144] pgrefill 0 [ 630.723123][T10144] pgscan 0 [ 630.723123][T10144] pgsteal 0 03:36:10 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x32000, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 03:36:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="d2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000840000100200000007000400ff7f000001000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000080001000200a60818000000000000008400000000000000020001000000c70820000000000000008400000008000000fe8000000000000000000000000000bb"], 0x70}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 630.919078][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16174,uid=0 [ 630.963644][T10144] Memory cgroup out of memory: Killed process 16174 (syz-executor.1) total-vm:72836kB, anon-rss:18488kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 631.058226][ T1054] oom_reaper: reaped process 16174 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 631.069773][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 631.099281][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 631.108370][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.118430][ T9059] Call Trace: [ 631.118456][ T9059] dump_stack+0x172/0x1f0 [ 631.118475][ T9059] dump_header+0x10b/0x82d [ 631.118486][ T9059] ? oom_kill_process+0x94/0x3f0 [ 631.118506][ T9059] oom_kill_process.cold+0x10/0x15 [ 631.140542][ T9059] out_of_memory+0x79a/0x12c0 [ 631.145228][ T9059] ? lock_downgrade+0x920/0x920 [ 631.150091][ T9059] ? oom_killer_disable+0x280/0x280 [ 631.155307][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 631.160874][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 631.166535][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 631.171652][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 631.176512][ T9059] try_charge+0x1080/0x1480 [ 631.181024][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 631.186661][ T9059] ? find_held_lock+0x35/0x130 [ 631.191432][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 631.196991][ T9059] ? lock_downgrade+0x920/0x920 [ 631.201840][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 631.207394][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 631.212862][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 631.218068][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 631.223618][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 631.228738][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 631.234117][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 631.240627][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 631.246355][ T9059] ? copy_process+0x46d1/0x6b00 [ 631.251217][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 631.256597][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 631.261890][ T9059] ? __kasan_check_read+0x11/0x20 [ 631.266930][ T9059] copy_process+0x3f8/0x6b00 [ 631.271544][ T9059] ? __kasan_check_read+0x11/0x20 [ 631.276587][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 631.281644][ T9059] ? __kasan_check_read+0x11/0x20 [ 631.286676][ T9059] ? mark_lock+0xc0/0x11e0 [ 631.291117][ T9059] ? __cleanup_sighand+0x60/0x60 [ 631.296062][ T9059] ? find_held_lock+0x35/0x130 [ 631.300853][ T9059] _do_fork+0x146/0xfa0 [ 631.305103][ T9059] ? copy_init_mm+0x20/0x20 [ 631.309641][ T9059] ? __kasan_check_read+0x11/0x20 [ 631.314756][ T9059] ? _copy_to_user+0x118/0x160 [ 631.319589][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.325834][ T9059] ? put_timespec64+0xda/0x140 [ 631.330599][ T9059] __x64_sys_clone+0x18d/0x250 [ 631.335369][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 631.340227][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 631.345526][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 631.350585][ T9059] do_syscall_64+0xfa/0x760 [ 631.355107][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.361012][ T9059] RIP: 0033:0x457dfa [ 631.364916][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 631.384786][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 631.393733][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 631.402071][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 631.410134][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 631.418113][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 631.426098][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 631.473236][ T9059] memory: usage 54664kB, limit 0kB, failcnt 14 [ 631.486554][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 631.493613][ T9059] Memory cgroup stats for /syz5: [ 631.493730][ T9059] anon 44244992 [ 631.493730][ T9059] file 32768 [ 631.493730][ T9059] kernel_stack 655360 [ 631.493730][ T9059] slab 8921088 [ 631.493730][ T9059] sock 0 [ 631.493730][ T9059] shmem 32768 [ 631.493730][ T9059] file_mapped 135168 [ 631.493730][ T9059] file_dirty 0 [ 631.493730][ T9059] file_writeback 0 [ 631.493730][ T9059] anon_thp 41943040 [ 631.493730][ T9059] inactive_anon 135168 [ 631.493730][ T9059] active_anon 44175360 [ 631.493730][ T9059] inactive_file 0 [ 631.493730][ T9059] active_file 53248 [ 631.493730][ T9059] unevictable 0 [ 631.493730][ T9059] slab_reclaimable 2703360 [ 631.493730][ T9059] slab_unreclaimable 6217728 [ 631.493730][ T9059] pgfault 67518 [ 631.493730][ T9059] pgmajfault 0 [ 631.493730][ T9059] workingset_refault 0 [ 631.493730][ T9059] workingset_activate 0 [ 631.493730][ T9059] workingset_nodereclaim 0 [ 631.493730][ T9059] pgrefill 63 [ 631.493730][ T9059] pgscan 33 [ 631.493730][ T9059] pgsteal 34 [ 631.588440][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9378,uid=0 [ 631.603999][ T9059] Memory cgroup out of memory: Killed process 9378 (syz-executor.5) total-vm:72704kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 631.619581][ T1054] oom_reaper: reaped process 9378 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 631.621280][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 631.650883][T10144] CPU: 0 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 631.660244][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.672794][T10144] Call Trace: [ 631.676552][T10144] dump_stack+0x172/0x1f0 [ 631.680891][T10144] dump_header+0x10b/0x82d [ 631.685322][T10144] ? oom_kill_process+0x94/0x3f0 [ 631.690257][T10144] oom_kill_process.cold+0x10/0x15 [ 631.695352][T10144] out_of_memory+0x79a/0x12c0 [ 631.700043][T10144] ? lock_downgrade+0x920/0x920 [ 631.704899][T10144] ? oom_killer_disable+0x280/0x280 [ 631.710711][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 631.720431][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 631.726087][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 631.731201][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 631.736043][T10144] try_charge+0x1080/0x1480 [ 631.740546][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 631.746083][T10144] ? find_held_lock+0x35/0x130 [ 631.750863][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 631.756421][T10144] ? lock_downgrade+0x920/0x920 [ 631.761262][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 631.766802][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 631.772266][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 631.777471][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 631.783028][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 631.788137][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 631.793496][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 631.799725][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 631.805430][T10144] ? copy_process+0x46d1/0x6b00 [ 631.810265][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 631.815550][T10144] ? trace_hardirqs_on+0x67/0x240 [ 631.820553][T10144] ? __kasan_check_read+0x11/0x20 [ 631.826006][T10144] copy_process+0x3f8/0x6b00 [ 631.830614][T10144] ? __kasan_check_read+0x11/0x20 [ 631.835628][T10144] ? __lock_acquire+0x1702/0x4c30 [ 631.840637][T10144] ? __kasan_check_read+0x11/0x20 [ 631.845647][T10144] ? mark_lock+0xc0/0x11e0 [ 631.850082][T10144] ? __cleanup_sighand+0x60/0x60 [ 631.855011][T10144] ? find_held_lock+0x35/0x130 [ 631.859773][T10144] _do_fork+0x146/0xfa0 [ 631.863922][T10144] ? copy_init_mm+0x20/0x20 [ 631.868418][T10144] ? __kasan_check_read+0x11/0x20 [ 631.873428][T10144] ? _copy_to_user+0x118/0x160 [ 631.878189][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.884438][T10144] ? put_timespec64+0xda/0x140 [ 631.889663][T10144] __x64_sys_clone+0x18d/0x250 [ 631.894440][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 631.899287][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 631.904967][T10144] ? trace_hardirqs_on+0x67/0x240 [ 631.909985][T10144] do_syscall_64+0xfa/0x760 [ 631.914478][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.920359][T10144] RIP: 0033:0x457dfa [ 631.924252][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 631.943864][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 631.952278][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 631.960255][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 631.968224][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 631.976205][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 631.984168][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 632.004161][T10144] memory: usage 88100kB, limit 0kB, failcnt 14 [ 632.010404][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 632.017454][T10144] Memory cgroup stats for /syz1: [ 632.017568][T10144] anon 81993728 [ 632.017568][T10144] file 184320 [ 632.017568][T10144] kernel_stack 262144 [ 632.017568][T10144] slab 6897664 [ 632.017568][T10144] sock 0 [ 632.017568][T10144] shmem 0 [ 632.017568][T10144] file_mapped 0 [ 632.017568][T10144] file_dirty 0 [ 632.017568][T10144] file_writeback 0 [ 632.017568][T10144] anon_thp 73400320 [ 632.017568][T10144] inactive_anon 52109312 [ 632.017568][T10144] active_anon 6680576 [ 632.017568][T10144] inactive_file 135168 [ 632.017568][T10144] active_file 135168 [ 632.017568][T10144] unevictable 23072768 [ 632.017568][T10144] slab_reclaimable 1892352 [ 632.017568][T10144] slab_unreclaimable 5005312 [ 632.017568][T10144] pgfault 63228 [ 632.017568][T10144] pgmajfault 0 [ 632.017568][T10144] workingset_refault 0 [ 632.017568][T10144] workingset_activate 0 [ 632.017568][T10144] workingset_nodereclaim 0 [ 632.017568][T10144] pgrefill 0 [ 632.017568][T10144] pgscan 0 [ 632.017568][T10144] pgsteal 0 [ 632.111458][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16310,uid=0 [ 632.127489][T10144] Memory cgroup out of memory: Killed process 16310 (syz-executor.1) total-vm:72704kB, anon-rss:18356kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 632.150486][ T1054] oom_reaper: reaped process 16310 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 632.153912][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 632.180554][T10144] CPU: 1 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 632.189700][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.199742][T10144] Call Trace: [ 632.203017][T10144] dump_stack+0x172/0x1f0 [ 632.207348][T10144] dump_header+0x10b/0x82d [ 632.211761][T10144] ? oom_kill_process+0x94/0x3f0 [ 632.216698][T10144] oom_kill_process.cold+0x10/0x15 [ 632.221793][T10144] out_of_memory+0x79a/0x12c0 [ 632.226453][T10144] ? lock_downgrade+0x920/0x920 [ 632.231287][T10144] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 632.237199][T10144] ? oom_killer_disable+0x280/0x280 [ 632.242403][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 632.247934][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 632.253577][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 632.258675][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 632.263512][T10144] try_charge+0x1080/0x1480 [ 632.268001][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 632.273554][T10144] ? find_held_lock+0x35/0x130 [ 632.278312][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 632.283850][T10144] ? lock_downgrade+0x920/0x920 [ 632.288686][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 632.294239][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 632.299681][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 632.304876][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 632.310406][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 632.315506][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 632.320879][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.327110][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 632.332824][T10144] ? copy_process+0x46d1/0x6b00 [ 632.337853][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 632.343122][T10144] ? trace_hardirqs_on+0x67/0x240 [ 632.348131][T10144] ? __kasan_check_read+0x11/0x20 [ 632.353162][T10144] copy_process+0x3f8/0x6b00 [ 632.357738][T10144] ? __kasan_check_read+0x11/0x20 [ 632.362743][T10144] ? __lock_acquire+0x1702/0x4c30 [ 632.367747][T10144] ? __kasan_check_read+0x11/0x20 [ 632.372766][T10144] ? mark_lock+0xc0/0x11e0 [ 632.377207][T10144] ? __cleanup_sighand+0x60/0x60 [ 632.382132][T10144] ? find_held_lock+0x35/0x130 [ 632.386903][T10144] _do_fork+0x146/0xfa0 [ 632.391323][T10144] ? copy_init_mm+0x20/0x20 [ 632.395810][T10144] ? __kasan_check_read+0x11/0x20 [ 632.400822][T10144] ? _copy_to_user+0x118/0x160 [ 632.405587][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 632.411897][T10144] ? put_timespec64+0xda/0x140 [ 632.416652][T10144] __x64_sys_clone+0x18d/0x250 [ 632.421404][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 632.426260][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 632.431545][T10144] ? trace_hardirqs_on+0x67/0x240 [ 632.436653][T10144] do_syscall_64+0xfa/0x760 [ 632.441158][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.447042][T10144] RIP: 0033:0x457dfa [ 632.450918][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 632.470525][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 632.478922][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 632.486894][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 632.495080][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 632.503059][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 632.511020][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 632.520531][T10144] memory: usage 69556kB, limit 0kB, failcnt 20 [ 632.526750][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 632.533587][T10144] Memory cgroup stats for /syz1: [ 632.533667][T10144] anon 63193088 [ 632.533667][T10144] file 184320 [ 632.533667][T10144] kernel_stack 196608 [ 632.533667][T10144] slab 6897664 [ 632.533667][T10144] sock 0 [ 632.533667][T10144] shmem 0 [ 632.533667][T10144] file_mapped 0 [ 632.533667][T10144] file_dirty 0 [ 632.533667][T10144] file_writeback 0 [ 632.533667][T10144] anon_thp 56623104 [ 632.533667][T10144] inactive_anon 35528704 [ 632.533667][T10144] active_anon 6680576 [ 632.533667][T10144] inactive_file 135168 [ 632.533667][T10144] active_file 135168 [ 632.533667][T10144] unevictable 20975616 [ 632.533667][T10144] slab_reclaimable 1892352 [ 632.533667][T10144] slab_unreclaimable 5005312 [ 632.533667][T10144] pgfault 63228 [ 632.533667][T10144] pgmajfault 0 [ 632.533667][T10144] workingset_refault 0 [ 632.533667][T10144] workingset_activate 0 [ 632.533667][T10144] workingset_nodereclaim 0 [ 632.533667][T10144] pgrefill 0 [ 632.533667][T10144] pgscan 0 [ 632.533667][T10144] pgsteal 0 [ 632.628132][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16269,uid=0 [ 632.645260][T10144] Memory cgroup out of memory: Killed process 16269 (syz-executor.1) total-vm:72704kB, anon-rss:18356kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 632.665516][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 632.675054][ T1054] oom_reaper: reaped process 16269 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 632.677399][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 632.697409][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.707461][ T9059] Call Trace: [ 632.710762][ T9059] dump_stack+0x172/0x1f0 [ 632.715112][ T9059] dump_header+0x10b/0x82d [ 632.719554][ T9059] ? oom_kill_process+0x94/0x3f0 [ 632.724500][ T9059] oom_kill_process.cold+0x10/0x15 [ 632.729672][ T9059] out_of_memory+0x79a/0x12c0 [ 632.734350][ T9059] ? lock_downgrade+0x920/0x920 [ 632.739204][ T9059] ? oom_killer_disable+0x280/0x280 [ 632.744412][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 632.750010][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 632.755835][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 632.760961][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 632.765828][ T9059] try_charge+0x1080/0x1480 [ 632.770343][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 632.775984][ T9059] ? find_held_lock+0x35/0x130 [ 632.780774][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 632.786340][ T9059] ? lock_downgrade+0x920/0x920 [ 632.791211][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 632.796748][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 632.802228][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 632.807438][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 632.812981][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 632.818077][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 632.823436][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.829662][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 632.835372][ T9059] ? copy_process+0x46d1/0x6b00 [ 632.840240][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 632.845522][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 632.850556][ T9059] ? __kasan_check_read+0x11/0x20 [ 632.855577][ T9059] copy_process+0x3f8/0x6b00 [ 632.860186][ T9059] ? __kasan_check_read+0x11/0x20 [ 632.865203][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 632.870246][ T9059] ? __kasan_check_read+0x11/0x20 [ 632.875293][ T9059] ? mark_lock+0xc0/0x11e0 [ 632.879706][ T9059] ? __cleanup_sighand+0x60/0x60 [ 632.884640][ T9059] ? find_held_lock+0x35/0x130 [ 632.889406][ T9059] _do_fork+0x146/0xfa0 [ 632.893544][ T9059] ? copy_init_mm+0x20/0x20 [ 632.898046][ T9059] ? __kasan_check_read+0x11/0x20 [ 632.903051][ T9059] ? _copy_to_user+0x118/0x160 [ 632.907819][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 632.914053][ T9059] ? put_timespec64+0xda/0x140 [ 632.918832][ T9059] __x64_sys_clone+0x18d/0x250 [ 632.923596][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 632.928443][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 632.933729][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 632.938737][ T9059] do_syscall_64+0xfa/0x760 [ 632.943224][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.949094][ T9059] RIP: 0033:0x457dfa [ 632.952989][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 632.972688][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 632.981083][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 632.989058][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 632.997013][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 633.004986][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 633.012968][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 633.022011][ T9059] memory: usage 50244kB, limit 0kB, failcnt 20 [ 633.028319][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 633.035257][ T9059] Memory cgroup stats for /syz5: [ 633.035373][ T9059] anon 39854080 [ 633.035373][ T9059] file 32768 [ 633.035373][ T9059] kernel_stack 589824 [ 633.035373][ T9059] slab 8785920 [ 633.035373][ T9059] sock 0 [ 633.035373][ T9059] shmem 32768 [ 633.035373][ T9059] file_mapped 135168 [ 633.035373][ T9059] file_dirty 0 [ 633.035373][ T9059] file_writeback 0 [ 633.035373][ T9059] anon_thp 37748736 [ 633.035373][ T9059] inactive_anon 135168 [ 633.035373][ T9059] active_anon 39858176 [ 633.035373][ T9059] inactive_file 0 [ 633.035373][ T9059] active_file 53248 [ 633.035373][ T9059] unevictable 0 [ 633.035373][ T9059] slab_reclaimable 2568192 [ 633.035373][ T9059] slab_unreclaimable 6217728 [ 633.035373][ T9059] pgfault 67518 [ 633.035373][ T9059] pgmajfault 0 [ 633.035373][ T9059] workingset_refault 0 [ 633.035373][ T9059] workingset_activate 0 [ 633.035373][ T9059] workingset_nodereclaim 0 [ 633.035373][ T9059] pgrefill 63 [ 633.035373][ T9059] pgscan 33 [ 633.035373][ T9059] pgsteal 34 [ 633.128860][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9311,uid=0 [ 633.145262][ T9059] Memory cgroup out of memory: Killed process 9311 (syz-executor.5) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 633.160079][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 633.161795][ T1054] oom_reaper: reaped process 9311 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 633.175376][T10144] CPU: 1 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 633.192023][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.202077][T10144] Call Trace: [ 633.205385][T10144] dump_stack+0x172/0x1f0 [ 633.209714][T10144] dump_header+0x10b/0x82d [ 633.214122][T10144] ? oom_kill_process+0x94/0x3f0 [ 633.219055][T10144] oom_kill_process.cold+0x10/0x15 [ 633.224184][T10144] out_of_memory+0x79a/0x12c0 [ 633.228865][T10144] ? lock_downgrade+0x920/0x920 [ 633.233734][T10144] ? oom_killer_disable+0x280/0x280 [ 633.238924][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 633.244461][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 633.250088][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 633.255209][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 633.260043][T10144] try_charge+0x1080/0x1480 [ 633.264548][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 633.270086][T10144] ? find_held_lock+0x35/0x130 [ 633.274847][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 633.280387][T10144] ? lock_downgrade+0x920/0x920 [ 633.285225][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 633.290859][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 633.296299][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 633.301495][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 633.307033][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 633.312150][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 633.317525][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.323752][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 633.329451][T10144] ? copy_process+0x46d1/0x6b00 [ 633.334350][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 633.339631][T10144] ? trace_hardirqs_on+0x67/0x240 [ 633.344649][T10144] ? __kasan_check_read+0x11/0x20 [ 633.349664][T10144] copy_process+0x3f8/0x6b00 [ 633.354333][T10144] ? __kasan_check_read+0x11/0x20 [ 633.359349][T10144] ? __lock_acquire+0x1702/0x4c30 [ 633.364358][T10144] ? __kasan_check_read+0x11/0x20 [ 633.369461][T10144] ? mark_lock+0xc0/0x11e0 [ 633.373861][T10144] ? __cleanup_sighand+0x60/0x60 [ 633.378778][T10144] ? find_held_lock+0x35/0x130 [ 633.383531][T10144] _do_fork+0x146/0xfa0 [ 633.387684][T10144] ? copy_init_mm+0x20/0x20 [ 633.392246][T10144] ? __kasan_check_read+0x11/0x20 [ 633.397781][T10144] ? _copy_to_user+0x118/0x160 [ 633.402530][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 633.408765][T10144] ? put_timespec64+0xda/0x140 [ 633.413540][T10144] __x64_sys_clone+0x18d/0x250 [ 633.418287][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 633.423124][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 633.428412][T10144] ? trace_hardirqs_on+0x67/0x240 [ 633.433457][T10144] do_syscall_64+0xfa/0x760 [ 633.437945][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.443815][T10144] RIP: 0033:0x457dfa [ 633.448048][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 633.467656][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 633.476066][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 633.484018][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 633.491969][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 633.499918][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 633.507879][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 633.516988][T10144] memory: usage 50872kB, limit 0kB, failcnt 26 [ 633.523148][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 633.530057][T10144] Memory cgroup stats for /syz1: [ 633.530183][T10144] anon 44294144 [ 633.530183][T10144] file 184320 [ 633.530183][T10144] kernel_stack 196608 [ 633.530183][T10144] slab 6705152 [ 633.530183][T10144] sock 0 [ 633.530183][T10144] shmem 0 [ 633.530183][T10144] file_mapped 0 [ 633.530183][T10144] file_dirty 0 [ 633.530183][T10144] file_writeback 0 [ 633.530183][T10144] anon_thp 39845888 [ 633.530183][T10144] inactive_anon 18829312 [ 633.530183][T10144] active_anon 6680576 [ 633.530183][T10144] inactive_file 135168 [ 633.530183][T10144] active_file 135168 [ 633.530183][T10144] unevictable 18878464 [ 633.530183][T10144] slab_reclaimable 1892352 [ 633.530183][T10144] slab_unreclaimable 4812800 [ 633.530183][T10144] pgfault 63228 [ 633.530183][T10144] pgmajfault 0 [ 633.530183][T10144] workingset_refault 0 [ 633.530183][T10144] workingset_activate 0 [ 633.530183][T10144] workingset_nodereclaim 0 [ 633.530183][T10144] pgrefill 0 [ 633.530183][T10144] pgscan 0 [ 633.530183][T10144] pgsteal 0 [ 633.623843][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16223,uid=0 [ 633.639457][T10144] Memory cgroup out of memory: Killed process 16223 (syz-executor.1) total-vm:72704kB, anon-rss:18356kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 633.655499][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 633.662835][ T1054] oom_reaper: reaped process 16223 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 633.670735][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 633.687541][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.698051][ T9059] Call Trace: [ 633.701347][ T9059] dump_stack+0x172/0x1f0 [ 633.705684][ T9059] dump_header+0x10b/0x82d [ 633.710091][ T9059] ? oom_kill_process+0x94/0x3f0 [ 633.715027][ T9059] oom_kill_process.cold+0x10/0x15 [ 633.720153][ T9059] out_of_memory+0x79a/0x12c0 [ 633.724845][ T9059] ? lock_downgrade+0x920/0x920 [ 633.729692][ T9059] ? oom_killer_disable+0x280/0x280 [ 633.734895][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 633.740459][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 633.746080][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 633.751176][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 633.756026][ T9059] try_charge+0x1080/0x1480 [ 633.760527][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 633.766060][ T9059] ? find_held_lock+0x35/0x130 [ 633.770845][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 633.776404][ T9059] ? lock_downgrade+0x920/0x920 [ 633.781249][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 633.786775][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 633.792221][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 633.797417][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 633.802952][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 633.808157][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 633.813513][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.819734][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 633.825434][ T9059] ? copy_process+0x46d1/0x6b00 [ 633.830274][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 633.835572][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 633.840588][ T9059] ? __kasan_check_read+0x11/0x20 [ 633.845598][ T9059] copy_process+0x3f8/0x6b00 [ 633.850172][ T9059] ? __kasan_check_read+0x11/0x20 [ 633.855198][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 633.860212][ T9059] ? __kasan_check_read+0x11/0x20 [ 633.865221][ T9059] ? mark_lock+0xc0/0x11e0 [ 633.869626][ T9059] ? __cleanup_sighand+0x60/0x60 [ 633.874555][ T9059] ? find_held_lock+0x35/0x130 [ 633.879341][ T9059] _do_fork+0x146/0xfa0 [ 633.883508][ T9059] ? copy_init_mm+0x20/0x20 [ 633.888285][ T9059] ? __kasan_check_read+0x11/0x20 [ 633.893292][ T9059] ? _copy_to_user+0x118/0x160 [ 633.898056][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 633.904392][ T9059] ? put_timespec64+0xda/0x140 [ 633.909161][ T9059] __x64_sys_clone+0x18d/0x250 [ 633.913935][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 633.918798][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 633.924089][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 633.929153][ T9059] do_syscall_64+0xfa/0x760 [ 633.933662][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.939545][ T9059] RIP: 0033:0x457dfa [ 633.943432][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 633.963032][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 633.971430][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 633.979413][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 633.987373][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 633.995341][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 634.003311][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 634.012389][ T9059] memory: usage 45860kB, limit 0kB, failcnt 26 [ 634.018611][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 634.025541][ T9059] Memory cgroup stats for /syz5: [ 634.025656][ T9059] anon 35487744 [ 634.025656][ T9059] file 32768 [ 634.025656][ T9059] kernel_stack 524288 [ 634.025656][ T9059] slab 8785920 [ 634.025656][ T9059] sock 0 [ 634.025656][ T9059] shmem 32768 [ 634.025656][ T9059] file_mapped 135168 [ 634.025656][ T9059] file_dirty 0 [ 634.025656][ T9059] file_writeback 0 [ 634.025656][ T9059] anon_thp 33554432 [ 634.025656][ T9059] inactive_anon 135168 [ 634.025656][ T9059] active_anon 35491840 [ 634.025656][ T9059] inactive_file 0 [ 634.025656][ T9059] active_file 53248 [ 634.025656][ T9059] unevictable 0 [ 634.025656][ T9059] slab_reclaimable 2568192 [ 634.025656][ T9059] slab_unreclaimable 6217728 [ 634.025656][ T9059] pgfault 67518 [ 634.025656][ T9059] pgmajfault 0 [ 634.025656][ T9059] workingset_refault 0 [ 634.025656][ T9059] workingset_activate 0 [ 634.025656][ T9059] workingset_nodereclaim 0 [ 634.025656][ T9059] pgrefill 63 [ 634.025656][ T9059] pgscan 33 [ 634.025656][ T9059] pgsteal 34 [ 634.119849][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15620,uid=0 [ 634.135432][ T9059] Memory cgroup out of memory: Killed process 15620 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 [ 634.150340][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 634.151617][ T1054] oom_reaper: reaped process 15620 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 634.166495][T10144] CPU: 1 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 634.182461][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.192521][T10144] Call Trace: [ 634.195825][T10144] dump_stack+0x172/0x1f0 [ 634.200247][T10144] dump_header+0x10b/0x82d [ 634.204655][T10144] ? oom_kill_process+0x94/0x3f0 [ 634.209608][T10144] oom_kill_process.cold+0x10/0x15 [ 634.214897][T10144] out_of_memory+0x79a/0x12c0 [ 634.219578][T10144] ? lock_downgrade+0x920/0x920 [ 634.224457][T10144] ? oom_killer_disable+0x280/0x280 [ 634.229649][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 634.235485][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 634.241117][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 634.246224][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 634.251090][T10144] try_charge+0x1080/0x1480 [ 634.255609][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 634.261160][T10144] ? find_held_lock+0x35/0x130 [ 634.265915][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 634.271462][T10144] ? lock_downgrade+0x920/0x920 [ 634.276301][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 634.281839][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 634.287281][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 634.292490][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 634.298038][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 634.303153][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 634.308871][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.315128][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 634.320853][T10144] ? copy_process+0x46d1/0x6b00 [ 634.325695][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 634.330964][T10144] ? trace_hardirqs_on+0x67/0x240 [ 634.335976][T10144] ? __kasan_check_read+0x11/0x20 [ 634.341013][T10144] copy_process+0x3f8/0x6b00 [ 634.345592][T10144] ? __kasan_check_read+0x11/0x20 [ 634.350604][T10144] ? __lock_acquire+0x1702/0x4c30 [ 634.355632][T10144] ? __kasan_check_read+0x11/0x20 [ 634.360646][T10144] ? mark_lock+0xc0/0x11e0 [ 634.365063][T10144] ? __cleanup_sighand+0x60/0x60 [ 634.369994][T10144] ? find_held_lock+0x35/0x130 [ 634.374773][T10144] _do_fork+0x146/0xfa0 [ 634.378934][T10144] ? copy_init_mm+0x20/0x20 [ 634.383549][T10144] ? __kasan_check_read+0x11/0x20 [ 634.388565][T10144] ? _copy_to_user+0x118/0x160 [ 634.393317][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 634.399563][T10144] ? put_timespec64+0xda/0x140 [ 634.404338][T10144] __x64_sys_clone+0x18d/0x250 [ 634.409081][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 634.413933][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 634.419211][T10144] ? trace_hardirqs_on+0x67/0x240 [ 634.424245][T10144] do_syscall_64+0xfa/0x760 [ 634.428750][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.434634][T10144] RIP: 0033:0x457dfa [ 634.438537][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 634.458145][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 634.466559][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 634.474529][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 634.482497][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 634.490456][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 634.498533][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 634.508233][T10144] memory: usage 32328kB, limit 0kB, failcnt 32 [ 634.524922][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 634.531829][T10144] Memory cgroup stats for /syz1: [ 634.531907][T10144] anon 25600000 [ 634.531907][T10144] file 184320 [ 634.531907][T10144] kernel_stack 131072 [ 634.531907][T10144] slab 6705152 [ 634.531907][T10144] sock 0 [ 634.531907][T10144] shmem 0 [ 634.531907][T10144] file_mapped 0 [ 634.531907][T10144] file_dirty 0 [ 634.531907][T10144] file_writeback 0 [ 634.531907][T10144] anon_thp 23068672 [ 634.531907][T10144] inactive_anon 2265088 [ 634.531907][T10144] active_anon 6680576 [ 634.531907][T10144] inactive_file 135168 [ 634.531907][T10144] active_file 135168 [ 634.531907][T10144] unevictable 16781312 [ 634.531907][T10144] slab_reclaimable 1892352 [ 634.531907][T10144] slab_unreclaimable 4812800 [ 634.531907][T10144] pgfault 63228 [ 634.531907][T10144] pgmajfault 0 [ 634.531907][T10144] workingset_refault 0 [ 634.531907][T10144] workingset_activate 0 [ 634.531907][T10144] workingset_nodereclaim 0 [ 634.531907][T10144] pgrefill 0 [ 634.531907][T10144] pgscan 0 [ 634.531907][T10144] pgsteal 0 [ 634.626043][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16163,uid=0 [ 634.641699][T10144] Memory cgroup out of memory: Killed process 16163 (syz-executor.1) total-vm:72704kB, anon-rss:18356kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 634.659219][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 634.662596][ T1054] oom_reaper: reaped process 16163 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 634.679563][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 634.691348][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.701405][ T9059] Call Trace: [ 634.704696][ T9059] dump_stack+0x172/0x1f0 [ 634.709126][ T9059] dump_header+0x10b/0x82d [ 634.713642][ T9059] ? oom_kill_process+0x94/0x3f0 [ 634.718811][ T9059] oom_kill_process.cold+0x10/0x15 [ 634.723923][ T9059] out_of_memory+0x79a/0x12c0 [ 634.728843][ T9059] ? lock_downgrade+0x920/0x920 [ 634.733689][ T9059] ? oom_killer_disable+0x280/0x280 [ 634.738897][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 634.744444][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 634.750075][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 634.755168][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 634.760099][ T9059] try_charge+0x1080/0x1480 [ 634.764598][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 634.770550][ T9059] ? find_held_lock+0x35/0x130 [ 634.775316][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 634.780861][ T9059] ? lock_downgrade+0x920/0x920 [ 634.785705][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 634.791263][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 634.796720][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 634.801902][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 634.807444][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 634.812578][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 634.817938][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.824176][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 634.829888][ T9059] ? copy_process+0x46d1/0x6b00 [ 634.834725][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 634.839994][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 634.845018][ T9059] ? __kasan_check_read+0x11/0x20 [ 634.850029][ T9059] copy_process+0x3f8/0x6b00 [ 634.854601][ T9059] ? __kasan_check_read+0x11/0x20 [ 634.859616][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 634.864624][ T9059] ? __kasan_check_read+0x11/0x20 [ 634.869638][ T9059] ? mark_lock+0xc0/0x11e0 [ 634.874073][ T9059] ? __cleanup_sighand+0x60/0x60 [ 634.879027][ T9059] ? find_held_lock+0x35/0x130 [ 634.887540][ T9059] _do_fork+0x146/0xfa0 [ 634.891712][ T9059] ? copy_init_mm+0x20/0x20 [ 634.896503][ T9059] ? __kasan_check_read+0x11/0x20 [ 634.901545][ T9059] ? _copy_to_user+0x118/0x160 [ 634.906305][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 634.912531][ T9059] ? put_timespec64+0xda/0x140 [ 634.917282][ T9059] __x64_sys_clone+0x18d/0x250 [ 634.922031][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 634.926876][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 634.932147][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 634.937178][ T9059] do_syscall_64+0xfa/0x760 [ 634.941669][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.947555][ T9059] RIP: 0033:0x457dfa [ 634.951439][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 634.971861][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 634.980261][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 634.988237][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 634.996205][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 635.004169][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 635.012150][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 635.030183][ T9059] memory: usage 43404kB, limit 0kB, failcnt 32 [ 635.036425][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 635.043469][ T9059] Memory cgroup stats for /syz5: [ 635.043557][ T9059] anon 33284096 [ 635.043557][ T9059] file 32768 [ 635.043557][ T9059] kernel_stack 524288 [ 635.043557][ T9059] slab 8650752 [ 635.043557][ T9059] sock 0 [ 635.043557][ T9059] shmem 32768 [ 635.043557][ T9059] file_mapped 135168 [ 635.043557][ T9059] file_dirty 0 [ 635.043557][ T9059] file_writeback 0 [ 635.043557][ T9059] anon_thp 31457280 [ 635.043557][ T9059] inactive_anon 135168 [ 635.043557][ T9059] active_anon 33288192 [ 635.043557][ T9059] inactive_file 0 [ 635.043557][ T9059] active_file 53248 [ 635.043557][ T9059] unevictable 0 [ 635.043557][ T9059] slab_reclaimable 2433024 [ 635.043557][ T9059] slab_unreclaimable 6217728 [ 635.043557][ T9059] pgfault 67518 [ 635.043557][ T9059] pgmajfault 0 [ 635.043557][ T9059] workingset_refault 0 [ 635.043557][ T9059] workingset_activate 0 [ 635.043557][ T9059] workingset_nodereclaim 0 [ 635.043557][ T9059] pgrefill 63 [ 635.043557][ T9059] pgscan 33 [ 635.043557][ T9059] pgsteal 34 [ 635.137935][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15608,uid=0 [ 635.153648][ T9059] Memory cgroup out of memory: Killed process 15608 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 [ 635.168655][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 635.170239][ T1054] oom_reaper: reaped process 15608 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 635.184136][T10144] CPU: 1 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 635.200899][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.211136][T10144] Call Trace: [ 635.214444][T10144] dump_stack+0x172/0x1f0 [ 635.218774][T10144] dump_header+0x10b/0x82d [ 635.223289][T10144] ? oom_kill_process+0x94/0x3f0 [ 635.228227][T10144] oom_kill_process.cold+0x10/0x15 [ 635.233332][T10144] out_of_memory+0x79a/0x12c0 [ 635.238009][T10144] ? lock_downgrade+0x920/0x920 [ 635.242872][T10144] ? oom_killer_disable+0x280/0x280 [ 635.248088][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 635.253637][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 635.259267][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 635.264381][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 635.269254][T10144] try_charge+0x1080/0x1480 [ 635.273756][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 635.279317][T10144] ? find_held_lock+0x35/0x130 [ 635.284088][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 635.290604][T10144] ? lock_downgrade+0x920/0x920 [ 635.295460][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 635.301024][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 635.306474][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 635.311669][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 635.317224][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 635.322360][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 635.327758][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.333992][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 635.339702][T10144] ? copy_process+0x46d1/0x6b00 [ 635.344555][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 635.349835][T10144] ? trace_hardirqs_on+0x67/0x240 [ 635.354873][T10144] ? __kasan_check_read+0x11/0x20 [ 635.359926][T10144] copy_process+0x3f8/0x6b00 [ 635.364525][T10144] ? __kasan_check_read+0x11/0x20 [ 635.369641][T10144] ? __lock_acquire+0x1702/0x4c30 [ 635.374669][T10144] ? __kasan_check_read+0x11/0x20 [ 635.379700][T10144] ? mark_lock+0xc0/0x11e0 [ 635.384216][T10144] ? __cleanup_sighand+0x60/0x60 [ 635.389183][T10144] ? find_held_lock+0x35/0x130 [ 635.393960][T10144] _do_fork+0x146/0xfa0 [ 635.398125][T10144] ? copy_init_mm+0x20/0x20 [ 635.402633][T10144] ? __kasan_check_read+0x11/0x20 [ 635.407760][T10144] ? _copy_to_user+0x118/0x160 [ 635.412524][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 635.418840][T10144] ? put_timespec64+0xda/0x140 [ 635.423625][T10144] __x64_sys_clone+0x18d/0x250 [ 635.428397][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 635.433243][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 635.438533][T10144] ? trace_hardirqs_on+0x67/0x240 [ 635.443559][T10144] do_syscall_64+0xfa/0x760 [ 635.448077][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.453972][T10144] RIP: 0033:0x457dfa [ 635.457871][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 635.477672][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 635.486097][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 635.494083][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 635.502206][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 635.510381][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 635.518373][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 635.527581][T10144] memory: usage 13116kB, limit 0kB, failcnt 38 [ 635.534252][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 635.541099][T10144] Memory cgroup stats for /syz1: [ 635.541210][T10144] anon 6803456 [ 635.541210][T10144] file 184320 [ 635.541210][T10144] kernel_stack 131072 [ 635.541210][T10144] slab 6033408 [ 635.541210][T10144] sock 0 [ 635.541210][T10144] shmem 0 [ 635.541210][T10144] file_mapped 0 [ 635.541210][T10144] file_dirty 0 [ 635.541210][T10144] file_writeback 0 [ 635.541210][T10144] anon_thp 6291456 [ 635.541210][T10144] inactive_anon 77824 [ 635.541210][T10144] active_anon 6680576 [ 635.541210][T10144] inactive_file 135168 [ 635.541210][T10144] active_file 135168 [ 635.541210][T10144] unevictable 4096 [ 635.541210][T10144] slab_reclaimable 1757184 [ 635.541210][T10144] slab_unreclaimable 4276224 [ 635.541210][T10144] pgfault 63228 [ 635.541210][T10144] pgmajfault 0 [ 635.541210][T10144] workingset_refault 0 [ 635.541210][T10144] workingset_activate 0 [ 635.541210][T10144] workingset_nodereclaim 0 [ 635.541210][T10144] pgrefill 0 [ 635.541210][T10144] pgscan 0 [ 635.541210][T10144] pgsteal 0 [ 635.541210][T10144] pgactivate 0 [ 635.637778][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14545,uid=0 [ 635.654252][T10144] Memory cgroup out of memory: Killed process 14545 (syz-executor.1) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 635.670387][ T1054] oom_reaper: reaped process 14545 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 635.670460][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 635.700552][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 635.709606][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.719680][ T9059] Call Trace: [ 635.722966][ T9059] dump_stack+0x172/0x1f0 [ 635.727297][ T9059] dump_header+0x10b/0x82d [ 635.731713][ T9059] ? oom_kill_process+0x94/0x3f0 [ 635.736642][ T9059] oom_kill_process.cold+0x10/0x15 [ 635.742460][ T9059] out_of_memory+0x79a/0x12c0 [ 635.747582][ T9059] ? lock_downgrade+0x920/0x920 [ 635.752440][ T9059] ? oom_killer_disable+0x280/0x280 [ 635.757650][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 635.763197][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 635.768841][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 635.773993][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 635.778836][ T9059] try_charge+0x1080/0x1480 [ 635.783332][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 635.788865][ T9059] ? find_held_lock+0x35/0x130 [ 635.793935][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 635.799471][ T9059] ? lock_downgrade+0x920/0x920 [ 635.804303][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 635.809834][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 635.815283][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 635.820467][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 635.825994][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 635.831279][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 635.837011][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.843238][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 635.848940][ T9059] ? copy_process+0x46d1/0x6b00 [ 635.853789][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 635.859063][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 635.864087][ T9059] ? __kasan_check_read+0x11/0x20 [ 635.869140][ T9059] copy_process+0x3f8/0x6b00 [ 635.874232][ T9059] ? __kasan_check_read+0x11/0x20 [ 635.879245][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 635.884270][ T9059] ? __kasan_check_read+0x11/0x20 [ 635.889289][ T9059] ? mark_lock+0xc0/0x11e0 [ 635.893688][ T9059] ? __cleanup_sighand+0x60/0x60 [ 635.898624][ T9059] ? find_held_lock+0x35/0x130 [ 635.903469][ T9059] _do_fork+0x146/0xfa0 [ 635.907609][ T9059] ? copy_init_mm+0x20/0x20 [ 635.912099][ T9059] ? __kasan_check_read+0x11/0x20 [ 635.917123][ T9059] ? _copy_to_user+0x118/0x160 [ 635.921885][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 635.928110][ T9059] ? put_timespec64+0xda/0x140 [ 635.932858][ T9059] __x64_sys_clone+0x18d/0x250 [ 635.939188][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 635.944042][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 635.949313][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 635.954328][ T9059] do_syscall_64+0xfa/0x760 [ 635.958816][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.964713][ T9059] RIP: 0033:0x457dfa [ 635.968708][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 635.988300][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 635.996706][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 636.004961][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 636.012925][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 636.020900][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 636.028862][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 636.044172][ T9059] memory: usage 41028kB, limit 0kB, failcnt 38 [ 636.050446][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 636.057588][ T9059] Memory cgroup stats for /syz5: [ 636.057722][ T9059] anon 31080448 [ 636.057722][ T9059] file 32768 [ 636.057722][ T9059] kernel_stack 458752 [ 636.057722][ T9059] slab 8650752 [ 636.057722][ T9059] sock 0 [ 636.057722][ T9059] shmem 32768 [ 636.057722][ T9059] file_mapped 135168 [ 636.057722][ T9059] file_dirty 0 [ 636.057722][ T9059] file_writeback 0 [ 636.057722][ T9059] anon_thp 29360128 [ 636.057722][ T9059] inactive_anon 135168 [ 636.057722][ T9059] active_anon 31084544 [ 636.057722][ T9059] inactive_file 0 [ 636.057722][ T9059] active_file 53248 [ 636.057722][ T9059] unevictable 0 [ 636.057722][ T9059] slab_reclaimable 2433024 [ 636.057722][ T9059] slab_unreclaimable 6217728 [ 636.057722][ T9059] pgfault 67518 [ 636.057722][ T9059] pgmajfault 0 [ 636.057722][ T9059] workingset_refault 0 [ 636.057722][ T9059] workingset_activate 0 [ 636.057722][ T9059] workingset_nodereclaim 0 [ 636.057722][ T9059] pgrefill 63 [ 636.057722][ T9059] pgscan 33 [ 636.057722][ T9059] pgsteal 34 [ 636.151083][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15593,uid=0 [ 636.166682][ T9059] Memory cgroup out of memory: Killed process 15593 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 [ 636.183016][ T1054] oom_reaper: reaped process 15593 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 636.190224][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 636.214630][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 636.223758][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.234004][ T9059] Call Trace: [ 636.237291][ T9059] dump_stack+0x172/0x1f0 [ 636.241701][ T9059] dump_header+0x10b/0x82d [ 636.246102][ T9059] ? oom_kill_process+0x94/0x3f0 [ 636.253391][ T9059] oom_kill_process.cold+0x10/0x15 [ 636.259151][ T9059] out_of_memory+0x79a/0x12c0 [ 636.263834][ T9059] ? lock_downgrade+0x920/0x920 [ 636.268675][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 636.274473][ T9059] ? oom_killer_disable+0x280/0x280 [ 636.279676][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 636.285207][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 636.290825][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 636.295933][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 636.300791][ T9059] try_charge+0x1080/0x1480 [ 636.305289][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 636.310823][ T9059] ? find_held_lock+0x35/0x130 [ 636.315611][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 636.321173][ T9059] ? lock_downgrade+0x920/0x920 [ 636.326008][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 636.331542][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 636.336998][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 636.342211][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 636.348185][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 636.353303][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 636.358670][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.364909][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 636.370642][ T9059] ? copy_process+0x46d1/0x6b00 [ 636.375488][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 636.380762][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 636.385771][ T9059] ? __kasan_check_read+0x11/0x20 [ 636.390804][ T9059] copy_process+0x3f8/0x6b00 [ 636.395557][ T9059] ? __kasan_check_read+0x11/0x20 [ 636.400776][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 636.405784][ T9059] ? __kasan_check_read+0x11/0x20 [ 636.410794][ T9059] ? mark_lock+0xc0/0x11e0 [ 636.415202][ T9059] ? __cleanup_sighand+0x60/0x60 [ 636.420133][ T9059] ? find_held_lock+0x35/0x130 [ 636.424900][ T9059] _do_fork+0x146/0xfa0 [ 636.429045][ T9059] ? copy_init_mm+0x20/0x20 [ 636.433535][ T9059] ? __kasan_check_read+0x11/0x20 [ 636.438543][ T9059] ? _copy_to_user+0x118/0x160 [ 636.443306][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 636.449558][ T9059] ? put_timespec64+0xda/0x140 [ 636.454316][ T9059] __x64_sys_clone+0x18d/0x250 [ 636.459084][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 636.463929][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 636.469253][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 636.474278][ T9059] do_syscall_64+0xfa/0x760 [ 636.478771][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.484647][ T9059] RIP: 0033:0x457dfa [ 636.488525][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 636.508136][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 636.516578][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 636.524548][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 636.532510][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 636.540485][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 636.548464][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 636.557473][ T9059] memory: usage 38688kB, limit 0kB, failcnt 44 [ 636.563681][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 636.570677][ T9059] Memory cgroup stats for /syz5: [ 636.570796][ T9059] anon 28860416 [ 636.570796][ T9059] file 32768 [ 636.570796][ T9059] kernel_stack 458752 [ 636.570796][ T9059] slab 8650752 [ 636.570796][ T9059] sock 0 [ 636.570796][ T9059] shmem 32768 [ 636.570796][ T9059] file_mapped 135168 [ 636.570796][ T9059] file_dirty 0 [ 636.570796][ T9059] file_writeback 0 [ 636.570796][ T9059] anon_thp 27262976 [ 636.570796][ T9059] inactive_anon 135168 [ 636.570796][ T9059] active_anon 28864512 [ 636.570796][ T9059] inactive_file 0 [ 636.570796][ T9059] active_file 53248 [ 636.570796][ T9059] unevictable 0 [ 636.570796][ T9059] slab_reclaimable 2433024 [ 636.570796][ T9059] slab_unreclaimable 6217728 [ 636.570796][ T9059] pgfault 67518 [ 636.570796][ T9059] pgmajfault 0 [ 636.570796][ T9059] workingset_refault 0 [ 636.570796][ T9059] workingset_activate 0 [ 636.570796][ T9059] workingset_nodereclaim 0 [ 636.570796][ T9059] pgrefill 63 [ 636.570796][ T9059] pgscan 33 [ 636.570796][ T9059] pgsteal 34 [ 636.666402][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11519,uid=0 [ 636.682022][ T9059] Memory cgroup out of memory: Killed process 11519 (syz-executor.5) total-vm:72704kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB, UID:0 [ 636.697283][ T1054] oom_reaper: reaped process 11519 (syz-executor.5), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 636.709718][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 636.725241][T10144] CPU: 0 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 636.734367][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.744565][T10144] Call Trace: [ 636.747941][T10144] dump_stack+0x172/0x1f0 [ 636.752257][T10144] dump_header+0x10b/0x82d [ 636.764909][T10144] ? oom_kill_process+0x94/0x3f0 [ 636.769844][T10144] oom_kill_process.cold+0x10/0x15 [ 636.775415][T10144] out_of_memory+0x79a/0x12c0 [ 636.780089][T10144] ? lock_downgrade+0x920/0x920 [ 636.784956][T10144] ? oom_killer_disable+0x280/0x280 [ 636.790417][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 636.795976][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 636.801628][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 636.806746][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 636.811588][T10144] try_charge+0x1080/0x1480 [ 636.816083][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 636.821645][T10144] ? find_held_lock+0x35/0x130 [ 636.826395][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 636.831932][T10144] ? lock_downgrade+0x920/0x920 [ 636.836769][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 636.842314][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 636.847776][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 636.852966][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 636.858527][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 636.863639][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 636.868997][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.875225][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 636.880928][T10144] ? copy_process+0x46d1/0x6b00 [ 636.885767][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 636.891033][T10144] ? trace_hardirqs_on+0x67/0x240 [ 636.896058][T10144] ? __kasan_check_read+0x11/0x20 [ 636.901088][T10144] copy_process+0x3f8/0x6b00 [ 636.905686][T10144] ? __kasan_check_read+0x11/0x20 [ 636.910716][T10144] ? __lock_acquire+0x1702/0x4c30 [ 636.915743][T10144] ? __kasan_check_read+0x11/0x20 [ 636.920767][T10144] ? mark_lock+0xc0/0x11e0 [ 636.925177][T10144] ? __cleanup_sighand+0x60/0x60 [ 636.930123][T10144] ? find_held_lock+0x35/0x130 [ 636.934884][T10144] _do_fork+0x146/0xfa0 [ 636.939024][T10144] ? copy_init_mm+0x20/0x20 [ 636.943666][T10144] ? __kasan_check_read+0x11/0x20 [ 636.950555][T10144] ? _copy_to_user+0x118/0x160 [ 636.955324][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 636.961565][T10144] ? put_timespec64+0xda/0x140 [ 636.966351][T10144] __x64_sys_clone+0x18d/0x250 [ 636.971099][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 636.975941][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 636.981210][T10144] ? trace_hardirqs_on+0x67/0x240 [ 636.986219][T10144] do_syscall_64+0xfa/0x760 [ 636.990709][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.996592][T10144] RIP: 0033:0x457dfa [ 637.000472][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 637.020151][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 637.028562][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 637.036517][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 637.044491][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 637.052448][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 637.060427][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 637.069061][T10144] memory: usage 10788kB, limit 0kB, failcnt 44 [ 637.075394][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 637.082287][T10144] Memory cgroup stats for /syz1: [ 637.082416][T10144] anon 4620288 [ 637.082416][T10144] file 184320 [ 637.082416][T10144] kernel_stack 65536 [ 637.082416][T10144] slab 6033408 [ 637.082416][T10144] sock 0 [ 637.082416][T10144] shmem 0 [ 637.082416][T10144] file_mapped 0 [ 637.082416][T10144] file_dirty 0 [ 637.082416][T10144] file_writeback 0 [ 637.082416][T10144] anon_thp 4194304 [ 637.082416][T10144] inactive_anon 77824 [ 637.082416][T10144] active_anon 4460544 [ 637.082416][T10144] inactive_file 135168 [ 637.082416][T10144] active_file 135168 [ 637.082416][T10144] unevictable 4096 [ 637.082416][T10144] slab_reclaimable 1757184 [ 637.082416][T10144] slab_unreclaimable 4276224 [ 637.082416][T10144] pgfault 63228 [ 637.082416][T10144] pgmajfault 0 [ 637.082416][T10144] workingset_refault 0 [ 637.082416][T10144] workingset_activate 0 [ 637.082416][T10144] workingset_nodereclaim 0 [ 637.082416][T10144] pgrefill 0 [ 637.082416][T10144] pgscan 0 [ 637.082416][T10144] pgsteal 0 [ 637.082416][T10144] pgactivate 0 [ 637.178441][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14515,uid=0 [ 637.193990][T10144] Memory cgroup out of memory: Killed process 14515 (syz-executor.1) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 637.209008][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 637.209022][ T1054] oom_reaper: reaped process 14515 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 637.234552][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 637.243679][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.253817][ T9059] Call Trace: [ 637.257112][ T9059] dump_stack+0x172/0x1f0 [ 637.261444][ T9059] dump_header+0x10b/0x82d [ 637.265850][ T9059] ? oom_kill_process+0x94/0x3f0 [ 637.270785][ T9059] oom_kill_process.cold+0x10/0x15 [ 637.275877][ T9059] out_of_memory+0x79a/0x12c0 [ 637.280531][ T9059] ? lock_downgrade+0x920/0x920 [ 637.285367][ T9059] ? oom_killer_disable+0x280/0x280 [ 637.290553][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 637.296093][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 637.301715][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 637.306823][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 637.311660][ T9059] try_charge+0x1080/0x1480 [ 637.316147][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 637.321696][ T9059] ? find_held_lock+0x35/0x130 [ 637.326463][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 637.331998][ T9059] ? lock_downgrade+0x920/0x920 [ 637.336827][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 637.342359][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 637.347802][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 637.352987][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 637.358532][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 637.363632][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 637.368999][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 637.375247][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 637.380963][ T9059] ? copy_process+0x46d1/0x6b00 [ 637.385797][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 637.391088][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 637.396530][ T9059] ? __kasan_check_read+0x11/0x20 [ 637.401542][ T9059] copy_process+0x3f8/0x6b00 [ 637.406118][ T9059] ? __kasan_check_read+0x11/0x20 [ 637.411127][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 637.416137][ T9059] ? __kasan_check_read+0x11/0x20 [ 637.421142][ T9059] ? mark_lock+0xc0/0x11e0 [ 637.425546][ T9059] ? __cleanup_sighand+0x60/0x60 [ 637.430476][ T9059] ? find_held_lock+0x35/0x130 [ 637.435243][ T9059] _do_fork+0x146/0xfa0 [ 637.439380][ T9059] ? copy_init_mm+0x20/0x20 [ 637.443865][ T9059] ? __kasan_check_read+0x11/0x20 [ 637.448882][ T9059] ? _copy_to_user+0x118/0x160 [ 637.453645][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 637.459867][ T9059] ? put_timespec64+0xda/0x140 [ 637.464622][ T9059] __x64_sys_clone+0x18d/0x250 [ 637.469372][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 637.474205][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 637.479486][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 637.484508][ T9059] do_syscall_64+0xfa/0x760 [ 637.488995][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.494870][ T9059] RIP: 0033:0x457dfa [ 637.498742][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 637.518329][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 637.526732][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 637.534694][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 637.542648][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 637.550606][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 637.558570][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 637.566883][ T9059] memory: usage 36352kB, limit 0kB, failcnt 50 [ 637.573097][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 637.580073][ T9059] Memory cgroup stats for /syz5: [ 637.580191][ T9059] anon 26611712 [ 637.580191][ T9059] file 32768 [ 637.580191][ T9059] kernel_stack 393216 [ 637.580191][ T9059] slab 8650752 [ 637.580191][ T9059] sock 0 [ 637.580191][ T9059] shmem 32768 [ 637.580191][ T9059] file_mapped 135168 [ 637.580191][ T9059] file_dirty 0 [ 637.580191][ T9059] file_writeback 0 [ 637.580191][ T9059] anon_thp 25165824 [ 637.580191][ T9059] inactive_anon 135168 [ 637.580191][ T9059] active_anon 26615808 [ 637.580191][ T9059] inactive_file 0 [ 637.580191][ T9059] active_file 53248 [ 637.580191][ T9059] unevictable 0 [ 637.580191][ T9059] slab_reclaimable 2433024 [ 637.580191][ T9059] slab_unreclaimable 6217728 [ 637.580191][ T9059] pgfault 67518 [ 637.580191][ T9059] pgmajfault 0 [ 637.580191][ T9059] workingset_refault 0 [ 637.580191][ T9059] workingset_activate 0 [ 637.580191][ T9059] workingset_nodereclaim 0 [ 637.580191][ T9059] pgrefill 63 [ 637.580191][ T9059] pgscan 33 [ 637.580191][ T9059] pgsteal 34 [ 637.673745][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19712,uid=0 [ 637.689959][ T9059] Memory cgroup out of memory: Killed process 19712 (syz-executor.5) total-vm:72836kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 637.705252][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 637.706272][ T1054] oom_reaper: reaped process 19712 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 637.720710][T10144] CPU: 0 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 637.737477][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.747628][T10144] Call Trace: [ 637.750918][T10144] dump_stack+0x172/0x1f0 [ 637.755238][T10144] dump_header+0x10b/0x82d [ 637.759634][T10144] ? oom_kill_process+0x94/0x3f0 [ 637.764553][T10144] oom_kill_process.cold+0x10/0x15 [ 637.769655][T10144] out_of_memory+0x79a/0x12c0 [ 637.774326][T10144] ? lock_downgrade+0x920/0x920 [ 637.779188][T10144] ? oom_killer_disable+0x280/0x280 [ 637.784491][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 637.790373][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 637.796014][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 637.801109][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 637.805969][T10144] try_charge+0x1080/0x1480 [ 637.810457][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 637.815980][T10144] ? find_held_lock+0x35/0x130 [ 637.820927][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 637.826457][T10144] ? lock_downgrade+0x920/0x920 [ 637.831286][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 637.836812][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 637.842250][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 637.847431][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 637.852970][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 637.858189][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 637.863548][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 637.869778][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 637.875478][T10144] ? copy_process+0x46d1/0x6b00 [ 637.880315][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 637.885584][T10144] ? trace_hardirqs_on+0x67/0x240 [ 637.890621][T10144] ? __kasan_check_read+0x11/0x20 [ 637.895644][T10144] copy_process+0x3f8/0x6b00 [ 637.900617][T10144] ? __kasan_check_read+0x11/0x20 [ 637.905655][T10144] ? __lock_acquire+0x1702/0x4c30 [ 637.910662][T10144] ? __kasan_check_read+0x11/0x20 [ 637.915688][T10144] ? mark_lock+0xc0/0x11e0 [ 637.920092][T10144] ? __cleanup_sighand+0x60/0x60 [ 637.925013][T10144] ? find_held_lock+0x35/0x130 [ 637.929775][T10144] _do_fork+0x146/0xfa0 [ 637.933914][T10144] ? copy_init_mm+0x20/0x20 [ 637.938404][T10144] ? __kasan_check_read+0x11/0x20 [ 637.943407][T10144] ? _copy_to_user+0x118/0x160 [ 637.948174][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 637.954412][T10144] ? put_timespec64+0xda/0x140 [ 637.959162][T10144] __x64_sys_clone+0x18d/0x250 [ 637.963908][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 637.968740][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 637.974019][T10144] ? trace_hardirqs_on+0x67/0x240 [ 637.979023][T10144] do_syscall_64+0xfa/0x760 [ 637.983507][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.989389][T10144] RIP: 0033:0x457dfa [ 637.993263][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 638.012949][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 638.021344][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 638.029321][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 638.037274][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 638.045224][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 638.053183][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 638.062296][T10144] memory: usage 8480kB, limit 0kB, failcnt 50 [ 638.074744][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 638.081660][T10144] Memory cgroup stats for /syz1: [ 638.081744][T10144] anon 2289664 [ 638.081744][T10144] file 184320 [ 638.081744][T10144] kernel_stack 65536 [ 638.081744][T10144] slab 6033408 [ 638.081744][T10144] sock 0 [ 638.081744][T10144] shmem 0 [ 638.081744][T10144] file_mapped 0 [ 638.081744][T10144] file_dirty 0 [ 638.081744][T10144] file_writeback 0 [ 638.081744][T10144] anon_thp 2097152 [ 638.081744][T10144] inactive_anon 77824 [ 638.081744][T10144] active_anon 2318336 [ 638.081744][T10144] inactive_file 135168 [ 638.081744][T10144] active_file 135168 [ 638.081744][T10144] unevictable 4096 [ 638.081744][T10144] slab_reclaimable 1757184 [ 638.081744][T10144] slab_unreclaimable 4276224 [ 638.081744][T10144] pgfault 63228 [ 638.081744][T10144] pgmajfault 0 [ 638.081744][T10144] workingset_refault 0 [ 638.081744][T10144] workingset_activate 0 [ 638.081744][T10144] workingset_nodereclaim 0 [ 638.081744][T10144] pgrefill 0 [ 638.081744][T10144] pgscan 0 [ 638.081744][T10144] pgsteal 0 [ 638.081744][T10144] pgactivate 0 [ 638.178272][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14492,uid=0 [ 638.193907][T10144] Memory cgroup out of memory: Killed process 14492 (syz-executor.1) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 638.209046][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 638.209969][ T1054] oom_reaper: reaped process 14492 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 638.224996][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 638.241079][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.251140][ T9059] Call Trace: [ 638.254438][ T9059] dump_stack+0x172/0x1f0 [ 638.258776][ T9059] dump_header+0x10b/0x82d [ 638.263199][ T9059] ? oom_kill_process+0x94/0x3f0 [ 638.268129][ T9059] oom_kill_process.cold+0x10/0x15 [ 638.273577][ T9059] out_of_memory+0x79a/0x12c0 [ 638.278244][ T9059] ? lock_downgrade+0x920/0x920 [ 638.283087][ T9059] ? oom_killer_disable+0x280/0x280 [ 638.288281][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 638.293841][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 638.299469][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 638.304594][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 638.309460][ T9059] try_charge+0x1080/0x1480 [ 638.313951][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 638.319503][ T9059] ? find_held_lock+0x35/0x130 [ 638.324251][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 638.330128][ T9059] ? lock_downgrade+0x920/0x920 [ 638.334964][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 638.340510][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 638.345965][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 638.351153][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 638.356691][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 638.361798][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 638.367181][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.373417][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 638.379126][ T9059] ? copy_process+0x46d1/0x6b00 [ 638.383967][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 638.389238][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 638.394244][ T9059] ? __kasan_check_read+0x11/0x20 [ 638.399280][ T9059] copy_process+0x3f8/0x6b00 [ 638.403875][ T9059] ? __kasan_check_read+0x11/0x20 [ 638.408889][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 638.413906][ T9059] ? __kasan_check_read+0x11/0x20 [ 638.419007][ T9059] ? mark_lock+0xc0/0x11e0 [ 638.423440][ T9059] ? __cleanup_sighand+0x60/0x60 [ 638.428389][ T9059] ? find_held_lock+0x35/0x130 [ 638.433159][ T9059] _do_fork+0x146/0xfa0 [ 638.437507][ T9059] ? copy_init_mm+0x20/0x20 [ 638.442465][ T9059] ? __kasan_check_read+0x11/0x20 [ 638.447480][ T9059] ? _copy_to_user+0x118/0x160 [ 638.452248][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 638.459419][ T9059] ? put_timespec64+0xda/0x140 [ 638.464193][ T9059] __x64_sys_clone+0x18d/0x250 [ 638.468960][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 638.474342][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 638.479617][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 638.484635][ T9059] do_syscall_64+0xfa/0x760 [ 638.489149][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.495020][ T9059] RIP: 0033:0x457dfa [ 638.498897][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 638.518517][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 638.526931][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 638.534891][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 638.542865][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 638.550929][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 638.558889][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 638.567224][ T9059] memory: usage 34032kB, limit 0kB, failcnt 56 [ 638.573530][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 638.580575][ T9059] Memory cgroup stats for /syz5: [ 638.580713][ T9059] anon 24444928 [ 638.580713][ T9059] file 32768 [ 638.580713][ T9059] kernel_stack 393216 [ 638.580713][ T9059] slab 8650752 [ 638.580713][ T9059] sock 0 [ 638.580713][ T9059] shmem 32768 [ 638.580713][ T9059] file_mapped 135168 [ 638.580713][ T9059] file_dirty 0 [ 638.580713][ T9059] file_writeback 0 [ 638.580713][ T9059] anon_thp 23068672 [ 638.580713][ T9059] inactive_anon 135168 [ 638.580713][ T9059] active_anon 24449024 [ 638.580713][ T9059] inactive_file 0 [ 638.580713][ T9059] active_file 53248 [ 638.580713][ T9059] unevictable 0 [ 638.580713][ T9059] slab_reclaimable 2433024 [ 638.580713][ T9059] slab_unreclaimable 6217728 [ 638.580713][ T9059] pgfault 67518 [ 638.580713][ T9059] pgmajfault 0 [ 638.580713][ T9059] workingset_refault 0 [ 638.580713][ T9059] workingset_activate 0 [ 638.580713][ T9059] workingset_nodereclaim 0 [ 638.580713][ T9059] pgrefill 63 [ 638.580713][ T9059] pgscan 33 [ 638.580713][ T9059] pgsteal 34 [ 638.674929][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19730,uid=0 [ 638.690995][ T9059] Memory cgroup out of memory: Killed process 19730 (syz-executor.5) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 638.716319][T10144] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 638.731033][T10144] CPU: 0 PID: 10144 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 638.740262][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.750317][T10144] Call Trace: [ 638.753685][T10144] dump_stack+0x172/0x1f0 [ 638.758005][T10144] dump_header+0x10b/0x82d [ 638.762411][T10144] ? oom_kill_process+0x94/0x3f0 [ 638.767349][T10144] oom_kill_process.cold+0x10/0x15 [ 638.772452][T10144] out_of_memory+0x79a/0x12c0 [ 638.777130][T10144] ? lock_downgrade+0x920/0x920 [ 638.781966][T10144] ? oom_killer_disable+0x280/0x280 [ 638.787151][T10144] mem_cgroup_out_of_memory+0x1d8/0x240 [ 638.792677][T10144] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 638.798298][T10144] ? do_raw_spin_unlock+0x57/0x270 [ 638.803483][T10144] ? _raw_spin_unlock+0x2d/0x50 [ 638.808317][T10144] try_charge+0x1080/0x1480 [ 638.812814][T10144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 638.818341][T10144] ? find_held_lock+0x35/0x130 [ 638.823108][T10144] ? get_mem_cgroup_from_mm+0x139/0x320 [ 638.828653][T10144] ? lock_downgrade+0x920/0x920 [ 638.833480][T10144] ? percpu_ref_tryget_live+0x111/0x290 [ 638.839023][T10144] __memcg_kmem_charge_memcg+0x71/0xf0 [ 638.844472][T10144] ? memcg_kmem_put_cache+0x50/0x50 [ 638.849664][T10144] ? get_mem_cgroup_from_mm+0x156/0x320 [ 638.855190][T10144] __memcg_kmem_charge+0x13a/0x3a0 [ 638.860285][T10144] __alloc_pages_nodemask+0x4f2/0x8f0 [ 638.865652][T10144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.871875][T10144] ? __alloc_pages_slowpath+0x2520/0x2520 [ 638.877571][T10144] ? copy_process+0x46d1/0x6b00 [ 638.882403][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 638.887769][T10144] ? trace_hardirqs_on+0x67/0x240 [ 638.892768][T10144] ? __kasan_check_read+0x11/0x20 [ 638.897778][T10144] copy_process+0x3f8/0x6b00 [ 638.902350][T10144] ? __kasan_check_read+0x11/0x20 [ 638.907529][T10144] ? __lock_acquire+0x1702/0x4c30 [ 638.912530][T10144] ? __kasan_check_read+0x11/0x20 [ 638.917564][T10144] ? mark_lock+0xc0/0x11e0 [ 638.921969][T10144] ? __cleanup_sighand+0x60/0x60 [ 638.926911][T10144] ? find_held_lock+0x35/0x130 [ 638.931673][T10144] _do_fork+0x146/0xfa0 [ 638.935818][T10144] ? copy_init_mm+0x20/0x20 [ 638.940319][T10144] ? __kasan_check_read+0x11/0x20 [ 638.945324][T10144] ? _copy_to_user+0x118/0x160 [ 638.950070][T10144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 638.956295][T10144] ? put_timespec64+0xda/0x140 [ 638.961058][T10144] __x64_sys_clone+0x18d/0x250 [ 638.966153][T10144] ? __ia32_sys_vfork+0xc0/0xc0 [ 638.970991][T10144] ? lockdep_hardirqs_on+0x418/0x5d0 [ 638.976275][T10144] ? trace_hardirqs_on+0x67/0x240 [ 638.981281][T10144] do_syscall_64+0xfa/0x760 [ 638.985769][T10144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.991634][T10144] RIP: 0033:0x457dfa [ 638.995515][T10144] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 639.015106][T10144] RSP: 002b:00007ffff0169b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 639.023506][T10144] RAX: ffffffffffffffda RBX: 00007ffff0169b10 RCX: 0000000000457dfa [ 639.031484][T10144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 639.039439][T10144] RBP: 00007ffff0169b50 R08: 0000000000000001 R09: 0000555556e71940 [ 639.047391][T10144] R10: 0000555556e71c10 R11: 0000000000000246 R12: 0000000000000001 [ 639.055340][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff0169ba0 [ 639.064195][T10144] memory: usage 5796kB, limit 0kB, failcnt 56 [ 639.070400][T10144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 639.077371][T10144] Memory cgroup stats for /syz1: [ 639.077483][T10144] anon 102400 [ 639.077483][T10144] file 184320 [ 639.077483][T10144] kernel_stack 65536 [ 639.077483][T10144] slab 5603328 [ 639.077483][T10144] sock 0 [ 639.077483][T10144] shmem 0 [ 639.077483][T10144] file_mapped 0 [ 639.077483][T10144] file_dirty 0 [ 639.077483][T10144] file_writeback 0 [ 639.077483][T10144] anon_thp 0 [ 639.077483][T10144] inactive_anon 77824 [ 639.077483][T10144] active_anon 102400 [ 639.077483][T10144] inactive_file 135168 [ 639.077483][T10144] active_file 135168 [ 639.077483][T10144] unevictable 4096 [ 639.077483][T10144] slab_reclaimable 1757184 [ 639.077483][T10144] slab_unreclaimable 3846144 [ 639.077483][T10144] pgfault 63228 [ 639.077483][T10144] pgmajfault 0 [ 639.077483][T10144] workingset_refault 0 [ 639.077483][T10144] workingset_activate 0 [ 639.077483][T10144] workingset_nodereclaim 0 [ 639.077483][T10144] pgrefill 0 [ 639.077483][T10144] pgscan 0 [ 639.077483][T10144] pgsteal 0 [ 639.077483][T10144] pgactivate 0 [ 639.172784][T10144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10144,uid=0 [ 639.188506][T10144] Memory cgroup out of memory: Killed process 10144 (syz-executor.1) total-vm:72440kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 [ 639.203864][ T1054] oom_reaper: reaped process 10144 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 639.204000][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 639.227361][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 639.236392][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.246505][ T9059] Call Trace: [ 639.246544][ T9059] dump_stack+0x172/0x1f0 [ 639.246563][ T9059] dump_header+0x10b/0x82d [ 639.246575][ T9059] ? oom_kill_process+0x94/0x3f0 [ 639.246590][ T9059] oom_kill_process.cold+0x10/0x15 [ 639.246616][ T9059] out_of_memory+0x79a/0x12c0 [ 639.259425][ T9059] ? lock_downgrade+0x920/0x920 [ 639.259454][ T9059] ? oom_killer_disable+0x280/0x280 [ 639.259484][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 639.259499][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 639.259523][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 639.259543][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 639.259562][ T9059] try_charge+0x1080/0x1480 [ 639.259581][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 639.259597][ T9059] ? find_held_lock+0x35/0x130 [ 639.259629][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 639.259647][ T9059] ? lock_downgrade+0x920/0x920 [ 639.259660][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 639.259675][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 639.259687][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 639.259707][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 639.259721][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 639.259757][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 639.270430][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.379076][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 639.384900][ T9059] ? copy_process+0x46d1/0x6b00 [ 639.389766][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 639.395041][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 639.400077][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.405113][ T9059] copy_process+0x3f8/0x6b00 [ 639.409703][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.414722][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 639.419743][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.424757][ T9059] ? mark_lock+0xc0/0x11e0 [ 639.429166][ T9059] ? __cleanup_sighand+0x60/0x60 [ 639.434120][ T9059] ? find_held_lock+0x35/0x130 [ 639.438907][ T9059] _do_fork+0x146/0xfa0 [ 639.443060][ T9059] ? copy_init_mm+0x20/0x20 [ 639.447553][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.452563][ T9059] ? _copy_to_user+0x118/0x160 [ 639.457327][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.463846][ T9059] ? put_timespec64+0xda/0x140 [ 639.469069][ T9059] __x64_sys_clone+0x18d/0x250 [ 639.473822][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 639.478671][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 639.483955][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 639.488977][ T9059] do_syscall_64+0xfa/0x760 [ 639.493504][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.499403][ T9059] RIP: 0033:0x457dfa [ 639.503302][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 639.522895][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 639.531296][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 639.539258][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 639.547344][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 639.555322][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 639.563282][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 639.572075][ T9059] memory: usage 31612kB, limit 0kB, failcnt 62 [ 639.578379][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 639.585348][ T9059] Memory cgroup stats for /syz5: [ 639.585465][ T9059] anon 22269952 [ 639.585465][ T9059] file 32768 [ 639.585465][ T9059] kernel_stack 393216 [ 639.585465][ T9059] slab 8650752 [ 639.585465][ T9059] sock 0 [ 639.585465][ T9059] shmem 32768 [ 639.585465][ T9059] file_mapped 135168 [ 639.585465][ T9059] file_dirty 0 [ 639.585465][ T9059] file_writeback 0 [ 639.585465][ T9059] anon_thp 20971520 [ 639.585465][ T9059] inactive_anon 135168 [ 639.585465][ T9059] active_anon 22274048 [ 639.585465][ T9059] inactive_file 0 [ 639.585465][ T9059] active_file 53248 [ 639.585465][ T9059] unevictable 0 [ 639.585465][ T9059] slab_reclaimable 2433024 [ 639.585465][ T9059] slab_unreclaimable 6217728 [ 639.585465][ T9059] pgfault 67518 [ 639.585465][ T9059] pgmajfault 0 [ 639.585465][ T9059] workingset_refault 0 [ 639.585465][ T9059] workingset_activate 0 [ 639.585465][ T9059] workingset_nodereclaim 0 [ 639.585465][ T9059] pgrefill 63 [ 639.585465][ T9059] pgscan 33 [ 639.585465][ T9059] pgsteal 34 [ 639.679102][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14550,uid=0 [ 639.694826][ T9059] Memory cgroup out of memory: Killed process 14550 (syz-executor.5) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 639.710753][ T1054] oom_reaper: reaped process 14550 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 639.712993][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 639.734823][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 639.743858][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.753943][ T9059] Call Trace: [ 639.757251][ T9059] dump_stack+0x172/0x1f0 [ 639.761587][ T9059] dump_header+0x10b/0x82d [ 639.766006][ T9059] ? oom_kill_process+0x94/0x3f0 [ 639.770950][ T9059] oom_kill_process.cold+0x10/0x15 [ 639.776070][ T9059] out_of_memory+0x79a/0x12c0 [ 639.780760][ T9059] ? lock_downgrade+0x920/0x920 [ 639.785626][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 639.791455][ T9059] ? oom_killer_disable+0x280/0x280 [ 639.796678][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 639.802237][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 639.807887][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 639.813004][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 639.817866][ T9059] try_charge+0x1080/0x1480 [ 639.822749][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 639.828299][ T9059] ? find_held_lock+0x35/0x130 [ 639.833086][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 639.840988][ T9059] ? lock_downgrade+0x920/0x920 [ 639.845840][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 639.851392][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 639.856854][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 639.862061][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 639.867623][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 639.872738][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 639.878111][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.884355][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 639.890074][ T9059] ? copy_process+0x46d1/0x6b00 [ 639.894933][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 639.900258][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 639.905303][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.910339][ T9059] copy_process+0x3f8/0x6b00 [ 639.914937][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.919962][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 639.924983][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.930116][ T9059] ? mark_lock+0xc0/0x11e0 [ 639.934549][ T9059] ? __cleanup_sighand+0x60/0x60 [ 639.939486][ T9059] ? find_held_lock+0x35/0x130 [ 639.944267][ T9059] _do_fork+0x146/0xfa0 [ 639.948429][ T9059] ? copy_init_mm+0x20/0x20 [ 639.952947][ T9059] ? __kasan_check_read+0x11/0x20 [ 639.957978][ T9059] ? _copy_to_user+0x118/0x160 [ 639.962857][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 639.969125][ T9059] ? put_timespec64+0xda/0x140 [ 639.973923][ T9059] __x64_sys_clone+0x18d/0x250 [ 639.978719][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 639.983616][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 639.988924][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 639.993966][ T9059] do_syscall_64+0xfa/0x760 [ 639.998485][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 640.004567][ T9059] RIP: 0033:0x457dfa [ 640.008447][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 640.028039][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 640.036458][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 640.044431][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 640.052402][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 640.060365][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 640.068326][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 640.076706][ T9059] memory: usage 29284kB, limit 0kB, failcnt 68 [ 640.082926][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 640.089908][ T9059] Memory cgroup stats for /syz5: [ 640.090022][ T9059] anon 20054016 [ 640.090022][ T9059] file 32768 [ 640.090022][ T9059] kernel_stack 327680 [ 640.090022][ T9059] slab 8650752 [ 640.090022][ T9059] sock 0 [ 640.090022][ T9059] shmem 32768 [ 640.090022][ T9059] file_mapped 135168 [ 640.090022][ T9059] file_dirty 0 [ 640.090022][ T9059] file_writeback 0 [ 640.090022][ T9059] anon_thp 18874368 [ 640.090022][ T9059] inactive_anon 135168 [ 640.090022][ T9059] active_anon 20058112 [ 640.090022][ T9059] inactive_file 0 [ 640.090022][ T9059] active_file 53248 [ 640.090022][ T9059] unevictable 0 [ 640.090022][ T9059] slab_reclaimable 2433024 [ 640.090022][ T9059] slab_unreclaimable 6217728 [ 640.090022][ T9059] pgfault 67518 [ 640.090022][ T9059] pgmajfault 0 [ 640.090022][ T9059] workingset_refault 0 [ 640.090022][ T9059] workingset_activate 0 [ 640.090022][ T9059] workingset_nodereclaim 0 [ 640.090022][ T9059] pgrefill 63 [ 640.090022][ T9059] pgscan 33 [ 640.090022][ T9059] pgsteal 34 [ 640.183659][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19808,uid=0 [ 640.183777][ T9059] Memory cgroup out of memory: Killed process 19808 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 640.225372][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 640.237991][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 640.248074][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.248082][ T9059] Call Trace: [ 640.248114][ T9059] dump_stack+0x172/0x1f0 [ 640.248133][ T9059] dump_header+0x10b/0x82d [ 640.248144][ T9059] ? oom_kill_process+0x94/0x3f0 [ 640.248159][ T9059] oom_kill_process.cold+0x10/0x15 [ 640.248174][ T9059] out_of_memory+0x79a/0x12c0 [ 640.248190][ T9059] ? lock_downgrade+0x920/0x920 [ 640.248209][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 640.248225][ T9059] ? oom_killer_disable+0x280/0x280 [ 640.248249][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 640.270352][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 640.270375][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 640.270398][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 640.321994][ T9059] try_charge+0x1080/0x1480 [ 640.326497][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 640.332154][ T9059] ? find_held_lock+0x35/0x130 [ 640.336930][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 640.342763][ T9059] ? lock_downgrade+0x920/0x920 [ 640.347627][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 640.353175][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 640.358651][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 640.363878][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 640.369415][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 640.374542][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 640.379915][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 640.386154][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 640.391871][ T9059] ? copy_process+0x46d1/0x6b00 [ 640.396726][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 640.402190][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 640.407222][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.412236][ T9059] copy_process+0x3f8/0x6b00 [ 640.416827][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.421850][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 640.426856][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.431871][ T9059] ? mark_lock+0xc0/0x11e0 [ 640.436640][ T9059] ? __cleanup_sighand+0x60/0x60 [ 640.441572][ T9059] ? find_held_lock+0x35/0x130 [ 640.446321][ T9059] _do_fork+0x146/0xfa0 [ 640.450498][ T9059] ? copy_init_mm+0x20/0x20 [ 640.455001][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.460017][ T9059] ? _copy_to_user+0x118/0x160 [ 640.464775][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 640.471028][ T9059] ? put_timespec64+0xda/0x140 [ 640.475790][ T9059] __x64_sys_clone+0x18d/0x250 [ 640.480553][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 640.485412][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 640.490696][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 640.495728][ T9059] do_syscall_64+0xfa/0x760 [ 640.500230][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 640.506118][ T9059] RIP: 0033:0x457dfa [ 640.510007][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 640.529687][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 640.538091][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 640.546072][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 640.554041][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 640.561999][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 640.569951][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 640.579402][ T9059] memory: usage 26968kB, limit 0kB, failcnt 74 [ 640.587374][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 640.594374][ T9059] Memory cgroup stats for /syz5: [ 640.594491][ T9059] anon 17842176 [ 640.594491][ T9059] file 32768 [ 640.594491][ T9059] kernel_stack 262144 [ 640.594491][ T9059] slab 8650752 [ 640.594491][ T9059] sock 0 [ 640.594491][ T9059] shmem 32768 [ 640.594491][ T9059] file_mapped 135168 [ 640.594491][ T9059] file_dirty 0 [ 640.594491][ T9059] file_writeback 0 [ 640.594491][ T9059] anon_thp 16777216 [ 640.594491][ T9059] inactive_anon 135168 [ 640.594491][ T9059] active_anon 17846272 [ 640.594491][ T9059] inactive_file 0 [ 640.594491][ T9059] active_file 53248 [ 640.594491][ T9059] unevictable 0 [ 640.594491][ T9059] slab_reclaimable 2433024 [ 640.594491][ T9059] slab_unreclaimable 6217728 [ 640.594491][ T9059] pgfault 67518 [ 640.594491][ T9059] pgmajfault 0 [ 640.594491][ T9059] workingset_refault 0 [ 640.594491][ T9059] workingset_activate 0 [ 640.594491][ T9059] workingset_nodereclaim 0 [ 640.594491][ T9059] pgrefill 63 [ 640.594491][ T9059] pgscan 33 [ 640.594491][ T9059] pgsteal 34 [ 640.687888][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19779,uid=0 [ 640.703623][ T9059] Memory cgroup out of memory: Killed process 19779 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 640.719425][ T1054] oom_reaper: reaped process 19779 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 640.733812][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 640.764499][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 640.773558][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.783616][ T9059] Call Trace: [ 640.786920][ T9059] dump_stack+0x172/0x1f0 [ 640.791259][ T9059] dump_header+0x10b/0x82d [ 640.795680][ T9059] ? oom_kill_process+0x94/0x3f0 [ 640.800625][ T9059] oom_kill_process.cold+0x10/0x15 [ 640.805834][ T9059] out_of_memory+0x79a/0x12c0 [ 640.810608][ T9059] ? lock_downgrade+0x920/0x920 [ 640.815734][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 640.821550][ T9059] ? oom_killer_disable+0x280/0x280 [ 640.826763][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 640.832325][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 640.837985][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 640.843098][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 640.847938][ T9059] try_charge+0x1080/0x1480 [ 640.852429][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 640.858058][ T9059] ? find_held_lock+0x35/0x130 [ 640.862823][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 640.868830][ T9059] ? lock_downgrade+0x920/0x920 [ 640.873709][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 640.879278][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 640.884742][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 640.889965][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 640.895518][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 640.900632][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 640.906029][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 640.912358][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 640.918078][ T9059] ? copy_process+0x46d1/0x6b00 [ 640.922931][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 640.928200][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 640.933205][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.938237][ T9059] copy_process+0x3f8/0x6b00 [ 640.942823][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.947831][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 640.952841][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.957862][ T9059] ? mark_lock+0xc0/0x11e0 [ 640.962278][ T9059] ? __cleanup_sighand+0x60/0x60 [ 640.967199][ T9059] ? find_held_lock+0x35/0x130 [ 640.971971][ T9059] _do_fork+0x146/0xfa0 [ 640.976126][ T9059] ? copy_init_mm+0x20/0x20 [ 640.980643][ T9059] ? __kasan_check_read+0x11/0x20 [ 640.985686][ T9059] ? _copy_to_user+0x118/0x160 [ 640.990448][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 640.996683][ T9059] ? put_timespec64+0xda/0x140 [ 641.001444][ T9059] __x64_sys_clone+0x18d/0x250 [ 641.006207][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 641.011062][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 641.016345][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 641.021371][ T9059] do_syscall_64+0xfa/0x760 [ 641.025872][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.031772][ T9059] RIP: 0033:0x457dfa [ 641.035766][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 641.055380][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 641.063976][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 641.071945][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 641.079922][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 641.087895][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 641.095872][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 641.118008][ T9059] memory: usage 24672kB, limit 0kB, failcnt 80 [ 641.124300][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 641.131172][ T9059] Memory cgroup stats for /syz5: [ 641.131304][ T9059] anon 15626240 [ 641.131304][ T9059] file 32768 [ 641.131304][ T9059] kernel_stack 262144 [ 641.131304][ T9059] slab 8650752 [ 641.131304][ T9059] sock 0 [ 641.131304][ T9059] shmem 32768 [ 641.131304][ T9059] file_mapped 135168 [ 641.131304][ T9059] file_dirty 0 [ 641.131304][ T9059] file_writeback 0 [ 641.131304][ T9059] anon_thp 14680064 [ 641.131304][ T9059] inactive_anon 135168 [ 641.131304][ T9059] active_anon 15630336 [ 641.131304][ T9059] inactive_file 0 [ 641.131304][ T9059] active_file 53248 [ 641.131304][ T9059] unevictable 0 [ 641.131304][ T9059] slab_reclaimable 2433024 [ 641.131304][ T9059] slab_unreclaimable 6217728 [ 641.131304][ T9059] pgfault 67518 [ 641.131304][ T9059] pgmajfault 0 [ 641.131304][ T9059] workingset_refault 0 [ 641.131304][ T9059] workingset_activate 0 [ 641.131304][ T9059] workingset_nodereclaim 0 [ 641.131304][ T9059] pgrefill 63 [ 641.131304][ T9059] pgscan 33 [ 641.131304][ T9059] pgsteal 34 [ 641.225401][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19702,uid=0 [ 641.242109][ T9059] Memory cgroup out of memory: Killed process 19702 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 641.259091][ T1054] oom_reaper: reaped process 19702 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 641.261397][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 641.282791][ T9059] CPU: 1 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 641.292193][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.302259][ T9059] Call Trace: [ 641.305562][ T9059] dump_stack+0x172/0x1f0 [ 641.309902][ T9059] dump_header+0x10b/0x82d [ 641.314405][ T9059] ? oom_kill_process+0x94/0x3f0 [ 641.319344][ T9059] oom_kill_process.cold+0x10/0x15 [ 641.324471][ T9059] out_of_memory+0x79a/0x12c0 [ 641.329158][ T9059] ? lock_downgrade+0x920/0x920 [ 641.334017][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 641.339835][ T9059] ? oom_killer_disable+0x280/0x280 [ 641.345052][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 641.350628][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 641.356272][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 641.361399][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 641.366266][ T9059] try_charge+0x1080/0x1480 [ 641.370779][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 641.376437][ T9059] ? find_held_lock+0x35/0x130 [ 641.381203][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 641.386758][ T9059] ? lock_downgrade+0x920/0x920 [ 641.391612][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 641.397164][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 641.402624][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 641.407850][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 641.413399][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 641.418519][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 641.423981][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.430229][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 641.435951][ T9059] ? copy_process+0x46d1/0x6b00 [ 641.440809][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 641.446099][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 641.451132][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.456164][ T9059] copy_process+0x3f8/0x6b00 [ 641.460848][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.465888][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 641.470901][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.475923][ T9059] ? mark_lock+0xc0/0x11e0 [ 641.480326][ T9059] ? __cleanup_sighand+0x60/0x60 [ 641.485258][ T9059] ? find_held_lock+0x35/0x130 [ 641.490052][ T9059] _do_fork+0x146/0xfa0 [ 641.494211][ T9059] ? copy_init_mm+0x20/0x20 [ 641.498710][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.503712][ T9059] ? _copy_to_user+0x118/0x160 [ 641.511518][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 641.517753][ T9059] ? put_timespec64+0xda/0x140 [ 641.522514][ T9059] __x64_sys_clone+0x18d/0x250 [ 641.527271][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 641.532143][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 641.537503][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 641.542517][ T9059] do_syscall_64+0xfa/0x760 [ 641.547019][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 641.552901][ T9059] RIP: 0033:0x457dfa [ 641.556898][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 641.576512][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 641.584981][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 641.593037][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 641.600995][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 641.609135][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 641.617219][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 641.626423][ T9059] memory: usage 22300kB, limit 0kB, failcnt 86 [ 641.632653][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 641.639679][ T9059] Memory cgroup stats for /syz5: [ 641.639792][ T9059] anon 13406208 [ 641.639792][ T9059] file 32768 [ 641.639792][ T9059] kernel_stack 196608 [ 641.639792][ T9059] slab 8650752 [ 641.639792][ T9059] sock 0 [ 641.639792][ T9059] shmem 32768 [ 641.639792][ T9059] file_mapped 135168 [ 641.639792][ T9059] file_dirty 0 [ 641.639792][ T9059] file_writeback 0 [ 641.639792][ T9059] anon_thp 12582912 [ 641.639792][ T9059] inactive_anon 135168 [ 641.639792][ T9059] active_anon 13410304 [ 641.639792][ T9059] inactive_file 0 [ 641.639792][ T9059] active_file 53248 [ 641.639792][ T9059] unevictable 0 [ 641.639792][ T9059] slab_reclaimable 2433024 [ 641.639792][ T9059] slab_unreclaimable 6217728 [ 641.639792][ T9059] pgfault 67518 [ 641.639792][ T9059] pgmajfault 0 [ 641.639792][ T9059] workingset_refault 0 [ 641.639792][ T9059] workingset_activate 0 [ 641.639792][ T9059] workingset_nodereclaim 0 [ 641.639792][ T9059] pgrefill 63 [ 641.639792][ T9059] pgscan 33 [ 641.639792][ T9059] pgsteal 34 [ 641.644871][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14513,uid=0 [ 641.753414][ T9059] Memory cgroup out of memory: Killed process 14513 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 641.775751][ T1054] oom_reaper: reaped process 14513 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 641.790639][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 641.802722][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 641.811928][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.822692][ T9059] Call Trace: [ 641.825978][ T9059] dump_stack+0x172/0x1f0 [ 641.830315][ T9059] dump_header+0x10b/0x82d [ 641.834744][ T9059] ? oom_kill_process+0x94/0x3f0 [ 641.840002][ T9059] oom_kill_process.cold+0x10/0x15 [ 641.845108][ T9059] out_of_memory+0x79a/0x12c0 [ 641.849860][ T9059] ? lock_downgrade+0x920/0x920 [ 641.854699][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 641.860616][ T9059] ? oom_killer_disable+0x280/0x280 [ 641.865943][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 641.871483][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 641.877198][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 641.882308][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 641.887184][ T9059] try_charge+0x1080/0x1480 [ 641.891675][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 641.897213][ T9059] ? find_held_lock+0x35/0x130 [ 641.901968][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 641.907502][ T9059] ? lock_downgrade+0x920/0x920 [ 641.912338][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 641.917881][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 641.923329][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 641.928517][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 641.934072][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 641.939185][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 641.944560][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 641.950804][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 641.956511][ T9059] ? copy_process+0x46d1/0x6b00 [ 641.961360][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 641.966629][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 641.971635][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.976660][ T9059] copy_process+0x3f8/0x6b00 [ 641.981323][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.986366][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 641.991401][ T9059] ? __kasan_check_read+0x11/0x20 [ 641.996408][ T9059] ? mark_lock+0xc0/0x11e0 [ 642.000831][ T9059] ? __cleanup_sighand+0x60/0x60 [ 642.005865][ T9059] ? find_held_lock+0x35/0x130 [ 642.010629][ T9059] _do_fork+0x146/0xfa0 [ 642.014770][ T9059] ? copy_init_mm+0x20/0x20 [ 642.019277][ T9059] ? __kasan_check_read+0x11/0x20 [ 642.024292][ T9059] ? _copy_to_user+0x118/0x160 [ 642.029041][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 642.035267][ T9059] ? put_timespec64+0xda/0x140 [ 642.040030][ T9059] __x64_sys_clone+0x18d/0x250 [ 642.044787][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 642.049655][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 642.054938][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 642.059949][ T9059] do_syscall_64+0xfa/0x760 [ 642.064440][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.070435][ T9059] RIP: 0033:0x457dfa [ 642.074314][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 642.094598][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 642.103012][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 642.110972][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 642.118952][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 642.126925][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 642.134906][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 642.143401][ T9059] memory: usage 19984kB, limit 0kB, failcnt 92 [ 642.149672][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 642.156640][ T9059] Memory cgroup stats for /syz5: [ 642.156755][ T9059] anon 11132928 [ 642.156755][ T9059] file 32768 [ 642.156755][ T9059] kernel_stack 196608 [ 642.156755][ T9059] slab 8650752 [ 642.156755][ T9059] sock 0 [ 642.156755][ T9059] shmem 32768 [ 642.156755][ T9059] file_mapped 135168 [ 642.156755][ T9059] file_dirty 0 [ 642.156755][ T9059] file_writeback 0 [ 642.156755][ T9059] anon_thp 10485760 [ 642.156755][ T9059] inactive_anon 135168 [ 642.156755][ T9059] active_anon 11137024 [ 642.156755][ T9059] inactive_file 0 [ 642.156755][ T9059] active_file 53248 [ 642.156755][ T9059] unevictable 0 [ 642.156755][ T9059] slab_reclaimable 2433024 [ 642.156755][ T9059] slab_unreclaimable 6217728 [ 642.156755][ T9059] pgfault 67518 [ 642.156755][ T9059] pgmajfault 0 [ 642.156755][ T9059] workingset_refault 0 [ 642.156755][ T9059] workingset_activate 0 [ 642.156755][ T9059] workingset_nodereclaim 0 [ 642.156755][ T9059] pgrefill 63 [ 642.156755][ T9059] pgscan 33 [ 642.156755][ T9059] pgsteal 34 [ 642.161761][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14494,uid=0 [ 642.274217][ T9059] Memory cgroup out of memory: Killed process 14494 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 642.332282][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 642.351409][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 642.360449][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.370851][ T9059] Call Trace: [ 642.374166][ T9059] dump_stack+0x172/0x1f0 [ 642.378610][ T9059] dump_header+0x10b/0x82d [ 642.383008][ T9059] ? oom_kill_process+0x94/0x3f0 [ 642.388027][ T9059] oom_kill_process.cold+0x10/0x15 [ 642.393840][ T9059] out_of_memory+0x79a/0x12c0 [ 642.398518][ T9059] ? lock_downgrade+0x920/0x920 [ 642.403384][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 642.409225][ T9059] ? oom_killer_disable+0x280/0x280 [ 642.414421][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 642.420130][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 642.425766][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 642.431144][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 642.435987][ T9059] try_charge+0x1080/0x1480 [ 642.440477][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 642.446010][ T9059] ? find_held_lock+0x35/0x130 [ 642.450842][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 642.456472][ T9059] ? lock_downgrade+0x920/0x920 [ 642.461435][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 642.466972][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 642.472439][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 642.477720][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 642.483255][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 642.488383][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 642.493752][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 642.499995][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 642.505711][ T9059] ? copy_process+0x46d1/0x6b00 [ 642.510556][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 642.515849][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 642.520883][ T9059] ? __kasan_check_read+0x11/0x20 [ 642.525914][ T9059] copy_process+0x3f8/0x6b00 [ 642.530498][ T9059] ? __kasan_check_read+0x11/0x20 [ 642.535509][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 642.540527][ T9059] ? __kasan_check_read+0x11/0x20 [ 642.545755][ T9059] ? mark_lock+0xc0/0x11e0 [ 642.550174][ T9059] ? __cleanup_sighand+0x60/0x60 [ 642.555121][ T9059] ? find_held_lock+0x35/0x130 [ 642.560502][ T9059] _do_fork+0x146/0xfa0 [ 642.564819][ T9059] ? copy_init_mm+0x20/0x20 [ 642.569479][ T9059] ? __kasan_check_read+0x11/0x20 [ 642.574489][ T9059] ? _copy_to_user+0x118/0x160 [ 642.579244][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 642.585554][ T9059] ? put_timespec64+0xda/0x140 [ 642.590304][ T9059] __x64_sys_clone+0x18d/0x250 [ 642.595050][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 642.599885][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 642.605157][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 642.610178][ T9059] do_syscall_64+0xfa/0x760 [ 642.614671][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.620670][ T9059] RIP: 0033:0x457dfa [ 642.624555][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 642.644261][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 642.652751][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 642.661176][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 642.670713][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 642.681133][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 642.689088][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 642.702592][ T9059] memory: usage 17684kB, limit 0kB, failcnt 98 [ 642.711616][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 642.719432][ T9059] Memory cgroup stats for /syz5: [ 642.719551][ T9059] anon 8945664 [ 642.719551][ T9059] file 32768 [ 642.719551][ T9059] kernel_stack 196608 [ 642.719551][ T9059] slab 8650752 [ 642.719551][ T9059] sock 0 [ 642.719551][ T9059] shmem 32768 [ 642.719551][ T9059] file_mapped 135168 [ 642.719551][ T9059] file_dirty 0 [ 642.719551][ T9059] file_writeback 0 [ 642.719551][ T9059] anon_thp 8388608 [ 642.719551][ T9059] inactive_anon 135168 [ 642.719551][ T9059] active_anon 8949760 [ 642.719551][ T9059] inactive_file 0 [ 642.719551][ T9059] active_file 53248 [ 642.719551][ T9059] unevictable 0 [ 642.719551][ T9059] slab_reclaimable 2433024 [ 642.719551][ T9059] slab_unreclaimable 6217728 [ 642.719551][ T9059] pgfault 67518 [ 642.719551][ T9059] pgmajfault 0 [ 642.719551][ T9059] workingset_refault 0 [ 642.719551][ T9059] workingset_activate 0 [ 642.719551][ T9059] workingset_nodereclaim 0 [ 642.719551][ T9059] pgrefill 63 [ 642.719551][ T9059] pgscan 33 [ 642.719551][ T9059] pgsteal 34 [ 642.719551][ T9059] pgactivate 0 [ 642.828124][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11869,uid=0 [ 642.844583][ T9059] Memory cgroup out of memory: Killed process 11869 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 642.861530][ T1054] oom_reaper: reaped process 11869 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 642.863074][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 642.885284][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 642.894327][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.894333][ T9059] Call Trace: [ 642.894356][ T9059] dump_stack+0x172/0x1f0 [ 642.894377][ T9059] dump_header+0x10b/0x82d [ 642.894389][ T9059] ? oom_kill_process+0x94/0x3f0 [ 642.894408][ T9059] oom_kill_process.cold+0x10/0x15 [ 642.922147][ T9059] out_of_memory+0x79a/0x12c0 [ 642.932101][ T9059] ? lock_downgrade+0x920/0x920 [ 642.936964][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 642.936980][ T9059] ? oom_killer_disable+0x280/0x280 [ 642.937005][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 642.937024][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 642.948666][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 642.948681][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 642.948701][ T9059] try_charge+0x1080/0x1480 [ 642.948723][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 642.960312][ T9059] ? find_held_lock+0x35/0x130 [ 642.971864][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 642.981892][ T9059] ? lock_downgrade+0x920/0x920 [ 642.992187][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 643.003166][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 643.008803][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 643.008822][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 643.008837][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 643.008856][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 643.008878][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.019720][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 643.030198][ T9059] ? copy_process+0x46d1/0x6b00 [ 643.042339][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 643.052445][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 643.057477][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.057497][ T9059] copy_process+0x3f8/0x6b00 [ 643.057512][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.057528][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 643.057546][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.067283][ T9059] ? mark_lock+0xc0/0x11e0 [ 643.067310][ T9059] ? __cleanup_sighand+0x60/0x60 [ 643.067322][ T9059] ? find_held_lock+0x35/0x130 [ 643.067347][ T9059] _do_fork+0x146/0xfa0 [ 643.067365][ T9059] ? copy_init_mm+0x20/0x20 [ 643.067392][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.077591][ T9059] ? _copy_to_user+0x118/0x160 [ 643.077625][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 643.077640][ T9059] ? put_timespec64+0xda/0x140 [ 643.077662][ T9059] __x64_sys_clone+0x18d/0x250 [ 643.077695][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 643.138698][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 643.144058][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 643.149561][ T9059] do_syscall_64+0xfa/0x760 [ 643.154142][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.160517][ T9059] RIP: 0033:0x457dfa [ 643.164665][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 643.184722][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 643.194420][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 643.202395][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 643.210407][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 643.218458][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 643.226648][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 643.235022][ T9059] memory: usage 15296kB, limit 0kB, failcnt 104 [ 643.241365][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 643.248428][ T9059] Memory cgroup stats for /syz5: [ 643.248585][ T9059] anon 6762496 [ 643.248585][ T9059] file 32768 [ 643.248585][ T9059] kernel_stack 131072 [ 643.248585][ T9059] slab 8650752 [ 643.248585][ T9059] sock 0 [ 643.248585][ T9059] shmem 32768 [ 643.248585][ T9059] file_mapped 135168 [ 643.248585][ T9059] file_dirty 0 [ 643.248585][ T9059] file_writeback 0 [ 643.248585][ T9059] anon_thp 6291456 [ 643.248585][ T9059] inactive_anon 135168 [ 643.248585][ T9059] active_anon 6766592 [ 643.248585][ T9059] inactive_file 0 [ 643.248585][ T9059] active_file 53248 [ 643.248585][ T9059] unevictable 0 [ 643.248585][ T9059] slab_reclaimable 2433024 [ 643.248585][ T9059] slab_unreclaimable 6217728 [ 643.248585][ T9059] pgfault 67518 [ 643.248585][ T9059] pgmajfault 0 [ 643.248585][ T9059] workingset_refault 0 [ 643.248585][ T9059] workingset_activate 0 [ 643.248585][ T9059] workingset_nodereclaim 0 [ 643.248585][ T9059] pgrefill 63 [ 643.248585][ T9059] pgscan 33 [ 643.248585][ T9059] pgsteal 34 [ 643.248585][ T9059] pgactivate 0 [ 643.346150][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11849,uid=0 [ 643.362165][ T9059] Memory cgroup out of memory: Killed process 11849 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 643.378434][ T1054] oom_reaper: reaped process 11849 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 643.380586][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 643.402532][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 643.411585][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.411608][ T9059] Call Trace: [ 643.424965][ T9059] dump_stack+0x172/0x1f0 [ 643.429304][ T9059] dump_header+0x10b/0x82d [ 643.433723][ T9059] ? oom_kill_process+0x94/0x3f0 [ 643.438666][ T9059] oom_kill_process.cold+0x10/0x15 [ 643.443792][ T9059] out_of_memory+0x79a/0x12c0 [ 643.443813][ T9059] ? lock_downgrade+0x920/0x920 [ 643.453358][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 643.459180][ T9059] ? oom_killer_disable+0x280/0x280 [ 643.459205][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 643.459222][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 643.459242][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 643.470351][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 643.485941][ T9059] try_charge+0x1080/0x1480 [ 643.490570][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 643.496359][ T9059] ? find_held_lock+0x35/0x130 [ 643.501122][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 643.506929][ T9059] ? lock_downgrade+0x920/0x920 [ 643.511909][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 643.517811][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 643.523285][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 643.528580][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 643.534141][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 643.539817][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 643.546079][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.552340][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 643.558175][ T9059] ? copy_process+0x46d1/0x6b00 [ 643.563485][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 643.569375][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 643.574581][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.579614][ T9059] copy_process+0x3f8/0x6b00 [ 643.584231][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.589466][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 643.594905][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.605067][ T9059] ? mark_lock+0xc0/0x11e0 [ 643.614131][ T9059] ? __cleanup_sighand+0x60/0x60 [ 643.619295][ T9059] ? find_held_lock+0x35/0x130 [ 643.624177][ T9059] _do_fork+0x146/0xfa0 [ 643.628340][ T9059] ? copy_init_mm+0x20/0x20 [ 643.633480][ T9059] ? __kasan_check_read+0x11/0x20 [ 643.639133][ T9059] ? _copy_to_user+0x118/0x160 [ 643.644064][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 643.650497][ T9059] ? put_timespec64+0xda/0x140 [ 643.655363][ T9059] __x64_sys_clone+0x18d/0x250 [ 643.660461][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 643.666239][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 643.671563][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 643.676935][ T9059] do_syscall_64+0xfa/0x760 [ 643.681457][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.688148][ T9059] RIP: 0033:0x457dfa [ 643.692028][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 643.711822][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 643.720244][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 643.728224][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 643.736553][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 643.744761][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 643.752818][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 643.762151][ T9059] memory: usage 12980kB, limit 0kB, failcnt 110 [ 643.768582][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 643.768588][ T9059] Memory cgroup stats for /syz5: [ 643.768712][ T9059] anon 4558848 [ 643.768712][ T9059] file 32768 [ 643.768712][ T9059] kernel_stack 131072 [ 643.768712][ T9059] slab 8650752 [ 643.768712][ T9059] sock 0 [ 643.768712][ T9059] shmem 32768 [ 643.768712][ T9059] file_mapped 135168 [ 643.768712][ T9059] file_dirty 0 [ 643.768712][ T9059] file_writeback 0 [ 643.768712][ T9059] anon_thp 4194304 [ 643.768712][ T9059] inactive_anon 135168 [ 643.768712][ T9059] active_anon 4562944 [ 643.768712][ T9059] inactive_file 0 [ 643.768712][ T9059] active_file 53248 [ 643.768712][ T9059] unevictable 0 [ 643.768712][ T9059] slab_reclaimable 2433024 [ 643.768712][ T9059] slab_unreclaimable 6217728 [ 643.768712][ T9059] pgfault 67518 [ 643.768712][ T9059] pgmajfault 0 [ 643.768712][ T9059] workingset_refault 0 [ 643.768712][ T9059] workingset_activate 0 [ 643.768712][ T9059] workingset_nodereclaim 0 [ 643.768712][ T9059] pgrefill 63 [ 643.768712][ T9059] pgscan 33 [ 643.768712][ T9059] pgsteal 34 [ 643.768712][ T9059] pgactivate 0 [ 643.768730][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11825,uid=0 [ 643.768887][ T9059] Memory cgroup out of memory: Killed process 11825 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 643.786773][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 643.916567][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 643.930602][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.930618][ T9059] Call Trace: [ 643.944416][ T9059] dump_stack+0x172/0x1f0 [ 643.948749][ T9059] dump_header+0x10b/0x82d [ 643.953182][ T9059] ? oom_kill_process+0x94/0x3f0 [ 643.958115][ T9059] oom_kill_process.cold+0x10/0x15 [ 643.963214][ T9059] out_of_memory+0x79a/0x12c0 [ 643.967888][ T9059] ? lock_downgrade+0x920/0x920 [ 643.972822][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 643.978625][ T9059] ? oom_killer_disable+0x280/0x280 [ 643.983826][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 643.989630][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 643.995884][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 644.001807][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 644.010817][ T9059] try_charge+0x1080/0x1480 [ 644.019976][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 644.027147][ T9059] ? find_held_lock+0x35/0x130 [ 644.032326][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 644.038013][ T9059] ? lock_downgrade+0x920/0x920 [ 644.043419][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 644.052126][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 644.061645][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 644.068553][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 644.075887][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 644.083479][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 644.097110][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.103996][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 644.111470][ T9059] ? copy_process+0x46d1/0x6b00 [ 644.118550][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 644.124415][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 644.131576][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.137041][ T9059] copy_process+0x3f8/0x6b00 [ 644.141945][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.147725][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 644.153427][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.158444][ T9059] ? mark_lock+0xc0/0x11e0 [ 644.162862][ T9059] ? __cleanup_sighand+0x60/0x60 [ 644.167807][ T9059] ? find_held_lock+0x35/0x130 [ 644.172570][ T9059] _do_fork+0x146/0xfa0 [ 644.176716][ T9059] ? copy_init_mm+0x20/0x20 [ 644.181209][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.186221][ T9059] ? _copy_to_user+0x118/0x160 [ 644.190984][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 644.197519][ T9059] ? put_timespec64+0xda/0x140 [ 644.202277][ T9059] __x64_sys_clone+0x18d/0x250 [ 644.207043][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 644.211901][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 644.217429][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 644.222450][ T9059] do_syscall_64+0xfa/0x760 [ 644.226958][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.232854][ T9059] RIP: 0033:0x457dfa [ 644.236733][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 644.256666][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 644.265072][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 644.273035][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 644.280998][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 644.288956][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 644.296936][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 644.305660][ T9059] memory: usage 10632kB, limit 0kB, failcnt 116 [ 644.311970][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 644.318955][ T9059] Memory cgroup stats for /syz5: [ 644.319070][ T9059] anon 2355200 [ 644.319070][ T9059] file 32768 [ 644.319070][ T9059] kernel_stack 65536 [ 644.319070][ T9059] slab 8650752 [ 644.319070][ T9059] sock 0 [ 644.319070][ T9059] shmem 32768 [ 644.319070][ T9059] file_mapped 135168 [ 644.319070][ T9059] file_dirty 0 [ 644.319070][ T9059] file_writeback 0 [ 644.319070][ T9059] anon_thp 2097152 [ 644.319070][ T9059] inactive_anon 135168 [ 644.319070][ T9059] active_anon 2359296 [ 644.319070][ T9059] inactive_file 0 [ 644.319070][ T9059] active_file 53248 [ 644.319070][ T9059] unevictable 0 [ 644.319070][ T9059] slab_reclaimable 2433024 [ 644.319070][ T9059] slab_unreclaimable 6217728 [ 644.319070][ T9059] pgfault 67518 [ 644.319070][ T9059] pgmajfault 0 [ 644.319070][ T9059] workingset_refault 0 [ 644.319070][ T9059] workingset_activate 0 [ 644.319070][ T9059] workingset_nodereclaim 0 [ 644.319070][ T9059] pgrefill 63 [ 644.319070][ T9059] pgscan 33 [ 644.319070][ T9059] pgsteal 34 [ 644.319070][ T9059] pgactivate 0 [ 644.415896][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 644.415911][ T9059] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11806,uid=0 [ 644.434018][ T9059] Memory cgroup out of memory: Killed process 11806 (syz-executor.5) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 644.467715][ T9059] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 644.479697][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 5.3.0-rc1-next-20190725 #51 [ 644.488724][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.498805][ T9059] Call Trace: [ 644.502111][ T9059] dump_stack+0x172/0x1f0 [ 644.506534][ T9059] dump_header+0x10b/0x82d [ 644.510950][ T9059] ? oom_kill_process+0x94/0x3f0 [ 644.515889][ T9059] oom_kill_process.cold+0x10/0x15 [ 644.521006][ T9059] out_of_memory+0x79a/0x12c0 [ 644.525684][ T9059] ? lock_downgrade+0x920/0x920 [ 644.530542][ T9059] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 644.536351][ T9059] ? oom_killer_disable+0x280/0x280 [ 644.541570][ T9059] mem_cgroup_out_of_memory+0x1d8/0x240 [ 644.547128][ T9059] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 644.552766][ T9059] ? do_raw_spin_unlock+0x57/0x270 [ 644.558015][ T9059] ? _raw_spin_unlock+0x2d/0x50 [ 644.562871][ T9059] try_charge+0x1080/0x1480 [ 644.567511][ T9059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 644.573066][ T9059] ? find_held_lock+0x35/0x130 [ 644.577900][ T9059] ? get_mem_cgroup_from_mm+0x139/0x320 [ 644.583504][ T9059] ? lock_downgrade+0x920/0x920 [ 644.588370][ T9059] ? percpu_ref_tryget_live+0x111/0x290 [ 644.593927][ T9059] __memcg_kmem_charge_memcg+0x71/0xf0 [ 644.599405][ T9059] ? memcg_kmem_put_cache+0x50/0x50 [ 644.604659][ T9059] ? get_mem_cgroup_from_mm+0x156/0x320 [ 644.610235][ T9059] __memcg_kmem_charge+0x13a/0x3a0 [ 644.615408][ T9059] __alloc_pages_nodemask+0x4f2/0x8f0 [ 644.621021][ T9059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.627648][ T9059] ? __alloc_pages_slowpath+0x2520/0x2520 [ 644.633417][ T9059] ? copy_process+0x46d1/0x6b00 [ 644.638292][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 644.643587][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 644.648634][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.653679][ T9059] copy_process+0x3f8/0x6b00 [ 644.658292][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.663342][ T9059] ? __lock_acquire+0x1702/0x4c30 [ 644.668394][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.673556][ T9059] ? mark_lock+0xc0/0x11e0 [ 644.677979][ T9059] ? __cleanup_sighand+0x60/0x60 [ 644.682930][ T9059] ? find_held_lock+0x35/0x130 [ 644.687734][ T9059] _do_fork+0x146/0xfa0 [ 644.691901][ T9059] ? copy_init_mm+0x20/0x20 [ 644.696428][ T9059] ? __kasan_check_read+0x11/0x20 [ 644.701459][ T9059] ? _copy_to_user+0x118/0x160 [ 644.706226][ T9059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 644.712490][ T9059] ? put_timespec64+0xda/0x140 [ 644.717284][ T9059] __x64_sys_clone+0x18d/0x250 [ 644.722078][ T9059] ? __ia32_sys_vfork+0xc0/0xc0 [ 644.726950][ T9059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 644.732240][ T9059] ? trace_hardirqs_on+0x67/0x240 [ 644.737277][ T9059] do_syscall_64+0xfa/0x760 [ 644.741827][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.747767][ T9059] RIP: 0033:0x457dfa [ 644.751702][ T9059] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 644.772522][ T9059] RSP: 002b:00007fffcd3622b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 644.780937][ T9059] RAX: ffffffffffffffda RBX: 00007fffcd3622b0 RCX: 0000000000457dfa [ 644.789285][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 644.797306][ T9059] RBP: 00007fffcd3622f0 R08: 0000000000000001 R09: 0000555555cd0940 [ 644.805386][ T9059] R10: 0000555555cd0c10 R11: 0000000000000246 R12: 0000000000000001 [ 644.813386][ T9059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcd362340 [ 644.824729][ T9059] memory: usage 8292kB, limit 0kB, failcnt 122 [ 644.831137][ T9059] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 644.838206][ T9059] Memory cgroup stats for /syz5: [ 644.838329][ T9059] anon 135168 [ 644.838329][ T9059] file 32768 [ 644.838329][ T9059] kernel_stack 0 [ 644.838329][ T9059] slab 8650752 [ 644.838329][ T9059] sock 0 [ 644.838329][ T9059] shmem 32768 [ 644.838329][ T9059] file_mapped 135168 [ 644.838329][ T9059] file_dirty 0 [ 644.838329][ T9059] file_writeback 0 [ 644.838329][ T9059] anon_thp 0 [ 644.838329][ T9059] inactive_anon 135168 [ 644.838329][ T9059] active_anon 139264 [ 644.838329][ T9059] inactive_file 0 [ 644.838329][ T9059] active_file 53248 [ 644.838329][ T9059] unevictable 0 [ 644.838329][ T9059] slab_reclaimable 2433024 [ 644.838329][ T9059] slab_unreclaimable 6217728 [ 644.838329][ T9059] pgfault 67518 [ 644.838329][ T9059] pgmajfault 0 [ 644.838329][ T9059] workingset_refault 0 [ 644.838329][ T9059] workingset_activate 0 [ 644.838329][ T9059] workingset_nodereclaim 0 [ 644.838329][ T9059] pgrefill 63 [ 644.838329][ T9059] pgscan 33 [ 644.838329][ T9059] pgsteal 34 [ 644.838329][ T9059] pgactivate 0 [ 644.843306][ T9059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9059,uid=0 [ 644.951466][ T9059] Memory cgroup out of memory: Killed process 9059 (syz-executor.5) total-vm:72440kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB, UID:0 [ 644.967759][ T1054] oom_reaper: reaped process 9059 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 03:36:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:36:24 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x32000, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 03:36:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x454d, 0xba, 0x0, 0x9, 0x0, 0x0, 0x0, 0x135, 0x38}, [{}]}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="020b0000000000100000000000a6c919563f42fa46"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x44) gettid() r2 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/229) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0xfffffffffffffcd2, &(0x7f0000000100)=[{&(0x7f0000000180)}]}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 03:36:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x800) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, 0x0) unshare(0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x6e39, 0xffffffffffffffff, 0x0, 0x0, 0x1}, &(0x7f00000002c0)) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) write$P9_RGETATTR(r4, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x209, {0x4, 0x0, 0x7}, 0x1, r5, 0x0, 0xcda4, 0xfffffffffffffff8, 0x4, 0xfff, 0x6, 0x9, 0x5, 0x6, 0x5, 0x400, 0x1, 0x0, 0x7, 0x800000000000}}, 0xa0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000003, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 03:36:24 executing program 3: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 645.784224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 645.790184][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:25 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2d82, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x06\x1e\r', @ifru_flags=0xf2030000}) r1 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/114) 03:36:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x454d, 0xba, 0x0, 0x9, 0x0, 0x0, 0x0, 0x135, 0x38}, [{}]}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="020b0000000000100000000000a6c919563f42fa46"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x800) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, 0x0) unshare(0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x6e39, 0xffffffffffffffff, 0x0, 0x0, 0x1}, &(0x7f00000002c0)) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) write$P9_RGETATTR(r4, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x209, {0x4, 0x0, 0x7}, 0x1, r5, 0x0, 0xcda4, 0xfffffffffffffff8, 0x4, 0xfff, 0x6, 0x9, 0x5, 0x6, 0x5, 0x400, 0x1, 0x0, 0x7, 0x800000000000}}, 0xa0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000003, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 03:36:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x40000200, 0x0, 0x0, 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:36:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x454d, 0xba, 0x0, 0x9, 0x0, 0x0, 0x0, 0x135, 0x38}, [{}]}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="020b0000000000100000000000a6c919563f42fa46"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x800) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, 0x0) unshare(0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x6e39, 0xffffffffffffffff, 0x0, 0x0, 0x1}, &(0x7f00000002c0)) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) write$P9_RGETATTR(r4, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x209, {0x4, 0x0, 0x7}, 0x1, r5, 0x0, 0xcda4, 0xfffffffffffffff8, 0x4, 0xfff, 0x6, 0x9, 0x5, 0x6, 0x5, 0x400, 0x1, 0x0, 0x7, 0x800000000000}}, 0xa0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000003, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 03:36:25 executing program 3: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 03:36:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x800) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, 0x0) unshare(0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x6e39, 0xffffffffffffffff, 0x0, 0x0, 0x1}, &(0x7f00000002c0)) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) write$P9_RGETATTR(r4, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x209, {0x4, 0x0, 0x7}, 0x1, r5, 0x0, 0xcda4, 0xfffffffffffffff8, 0x4, 0xfff, 0x6, 0x9, 0x5, 0x6, 0x5, 0x400, 0x1, 0x0, 0x7, 0x800000000000}}, 0xa0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000003, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) [ 646.525911][ T902] IPVS: ftp: loaded support on port[0] = 21 03:36:26 executing program 2: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 647.215810][T14114] device bridge_slave_1 left promiscuous mode [ 647.222097][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.305337][T14114] device bridge_slave_0 left promiscuous mode [ 647.334378][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.440927][T14114] bond4 (unregistering): Released all slaves [ 649.452569][T14114] bond3 (unregistering): Released all slaves [ 649.468594][T14114] bond2 (unregistering): Released all slaves [ 649.482233][T14114] bond1 (unregistering): Released all slaves [ 649.545202][T14114] device hsr_slave_0 left promiscuous mode [ 649.584448][T14114] device hsr_slave_1 left promiscuous mode [ 649.637920][T14114] device team_slave_1 left promiscuous mode [ 649.645185][T14114] team0 (unregistering): Port device team_slave_1 removed [ 649.657482][T14114] device team_slave_0 left promiscuous mode [ 649.665231][T14114] team0 (unregistering): Port device team_slave_0 removed [ 649.678982][T14114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.721233][T14114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.819580][T14114] bond0 (unregistering): Released all slaves [ 649.942409][ T1020] IPVS: ftp: loaded support on port[0] = 21 [ 649.942551][ T1022] IPVS: ftp: loaded support on port[0] = 21 [ 650.089652][ T1020] chnl_net:caif_netlink_parms(): no params data found [ 650.145628][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.152909][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.161427][ T1020] device bridge_slave_0 entered promiscuous mode [ 650.169961][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.177245][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.185904][ T1020] device bridge_slave_1 entered promiscuous mode [ 650.217708][ T1020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.232586][ T1020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.282561][ T1020] team0: Port device team_slave_0 added [ 650.355629][ T1020] team0: Port device team_slave_1 added [ 650.528182][ T1020] device hsr_slave_0 entered promiscuous mode [ 650.584574][ T1020] device hsr_slave_1 entered promiscuous mode [ 650.624246][ T1020] debugfs: Directory 'hsr0' with parent '/' already present! [ 650.635156][ T1022] chnl_net:caif_netlink_parms(): no params data found [ 650.687551][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.694734][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.702168][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.709345][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.791671][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.832216][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.853099][ T1022] device bridge_slave_0 entered promiscuous mode [ 650.894064][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.901984][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.929891][ T1022] device bridge_slave_1 entered promiscuous mode [ 650.980689][ T1022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.997768][ T1022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.032817][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.055438][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.167123][ T1022] team0: Port device team_slave_0 added [ 651.183927][ T1022] team0: Port device team_slave_1 added [ 651.252892][ T1020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.317430][ T1022] device hsr_slave_0 entered promiscuous mode [ 651.354580][ T1022] device hsr_slave_1 entered promiscuous mode [ 651.394234][ T1022] debugfs: Directory 'hsr0' with parent '/' already present! [ 651.413868][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.424942][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.436544][ T1020] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.472219][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.495202][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.503781][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.510964][T21207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.596778][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.606004][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.625606][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.632747][T10145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.654585][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.663667][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.736400][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.746756][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.766867][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.785307][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.804174][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.813003][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.835404][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.854415][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.882193][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.894403][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.908014][ T1022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.969527][ T1020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.977332][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.986312][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.006509][ T1022] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.046607][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.057291][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.067316][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.074490][T21207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.082423][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.093952][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.110661][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.117888][T21207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.135630][T21207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.176613][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.195624][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.217734][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.228056][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.237439][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.246900][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.255886][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.264762][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.274305][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.283460][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.295581][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.315679][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.420939][ T1022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.579853][ T1032] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 652.772357][ T1032] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 652.785578][ T1032] CPU: 0 PID: 1032 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 652.794631][ T1032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.804775][ T1032] Call Trace: [ 652.808077][ T1032] dump_stack+0x172/0x1f0 [ 652.812433][ T1032] dump_header+0x10b/0x82d [ 652.816854][ T1032] oom_kill_process.cold+0x10/0x15 [ 652.822013][ T1032] out_of_memory+0x79a/0x12c0 [ 652.826746][ T1032] ? __sched_text_start+0x8/0x8 [ 652.831703][ T1032] ? oom_killer_disable+0x280/0x280 [ 652.837125][ T1032] mem_cgroup_out_of_memory+0x1d8/0x240 [ 652.843032][ T1032] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 652.848677][ T1032] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 652.854489][ T1032] ? cgroup_file_notify+0x140/0x1b0 [ 652.859701][ T1032] memory_max_write+0x262/0x3a0 [ 652.864638][ T1032] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 652.871599][ T1032] ? lock_acquire+0x190/0x410 [ 652.876287][ T1032] ? kernfs_fop_write+0x227/0x480 [ 652.881323][ T1032] cgroup_file_write+0x241/0x790 [ 652.886382][ T1032] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 652.893553][ T1032] ? cgroup_migrate_add_task+0x890/0x890 [ 652.899356][ T1032] ? cgroup_migrate_add_task+0x890/0x890 [ 652.905126][ T1032] kernfs_fop_write+0x2b8/0x480 [ 652.910162][ T1032] __vfs_write+0x8a/0x110 [ 652.914703][ T1032] ? kernfs_fop_open+0xd80/0xd80 [ 652.919984][ T1032] vfs_write+0x268/0x5d0 [ 652.924379][ T1032] ksys_write+0x14f/0x290 [ 652.928885][ T1032] ? __ia32_sys_read+0xb0/0xb0 [ 652.933975][ T1032] ? do_syscall_64+0x26/0x760 [ 652.938785][ T1032] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.944977][ T1032] ? do_syscall_64+0x26/0x760 [ 652.949818][ T1032] __x64_sys_write+0x73/0xb0 [ 652.954576][ T1032] do_syscall_64+0xfa/0x760 [ 652.959240][ T1032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.965246][ T1032] RIP: 0033:0x459829 [ 652.969276][ T1032] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.989001][ T1032] RSP: 002b:00007f3b3c18ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.997548][ T1032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 653.005744][ T1032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 653.013855][ T1032] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 653.022140][ T1032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b3c18b6d4 [ 653.030218][ T1032] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 653.069820][ T1032] memory: usage 6420kB, limit 0kB, failcnt 59 [ 653.086190][ T1032] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 653.093365][ T1032] Memory cgroup stats for /syz1: [ 653.108240][ T1032] anon 2232320 [ 653.108240][ T1032] file 184320 [ 653.108240][ T1032] kernel_stack 65536 [ 653.108240][ T1032] slab 4132864 [ 653.108240][ T1032] sock 0 [ 653.108240][ T1032] shmem 0 [ 653.108240][ T1032] file_mapped 0 [ 653.108240][ T1032] file_dirty 0 [ 653.108240][ T1032] file_writeback 0 [ 653.108240][ T1032] anon_thp 2097152 [ 653.108240][ T1032] inactive_anon 77824 [ 653.108240][ T1032] active_anon 2232320 [ 653.108240][ T1032] inactive_file 135168 [ 653.108240][ T1032] active_file 135168 [ 653.108240][ T1032] unevictable 4096 [ 653.108240][ T1032] slab_reclaimable 1622016 [ 653.108240][ T1032] slab_unreclaimable 2510848 [ 653.108240][ T1032] pgfault 63294 [ 653.108240][ T1032] pgmajfault 0 [ 653.108240][ T1032] workingset_refault 0 [ 653.108240][ T1032] workingset_activate 0 [ 653.108240][ T1032] workingset_nodereclaim 0 [ 653.108240][ T1032] pgrefill 0 [ 653.108240][ T1032] pgscan 0 [ 653.108240][ T1032] pgsteal 0 [ 653.108240][ T1032] pgactivate 0 [ 653.216450][ T1032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1030,uid=0 [ 653.240707][ T1032] Memory cgroup out of memory: Killed process 1030 (syz-executor.1) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 [ 653.260446][ T1054] oom_reaper: reaped process 1030 (syz-executor.1), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB 03:36:33 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000540)={'syz'}) 03:36:33 executing program 3: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 03:36:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffd, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}]}, 0x190) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 03:36:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00'}) 03:36:33 executing program 2: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 03:36:33 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2d82, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x06\x1e\r', @ifru_flags=0xf2030000}) r1 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/114) [ 653.791857][ T1020] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 653.890057][ T1020] CPU: 1 PID: 1020 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190725 #51 [ 653.899266][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.909358][ T1020] Call Trace: [ 653.912704][ T1020] dump_stack+0x172/0x1f0 [ 653.917086][ T1020] dump_header+0x10b/0x82d [ 653.921552][ T1020] ? oom_kill_process+0x94/0x3f0 [ 653.926526][ T1020] oom_kill_process.cold+0x10/0x15 [ 653.931671][ T1020] out_of_memory+0x79a/0x12c0 [ 653.936387][ T1020] ? lock_downgrade+0x920/0x920 [ 653.941457][ T1020] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 653.947407][ T1020] ? oom_killer_disable+0x280/0x280 [ 653.952671][ T1020] mem_cgroup_out_of_memory+0x1d8/0x240 [ 653.958263][ T1020] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 653.963942][ T1020] ? do_raw_spin_unlock+0x57/0x270 [ 653.969550][ T1020] ? _raw_spin_unlock+0x2d/0x50 [ 653.974473][ T1020] try_charge+0x1080/0x1480 [ 653.979058][ T1020] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 653.984747][ T1020] ? percpu_ref_tryget_live+0x111/0x290 [ 653.990338][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 653.997117][ T1020] ? __kasan_check_read+0x11/0x20 [ 654.002267][ T1020] ? get_mem_cgroup_from_mm+0x156/0x320 [ 654.007923][ T1020] mem_cgroup_try_charge+0x136/0x590 [ 654.013307][ T1020] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 654.019258][ T1020] wp_page_copy+0x421/0x1690 [ 654.024006][ T1020] ? find_held_lock+0x35/0x130 [ 654.028883][ T1020] ? follow_pfn+0x2a0/0x2a0 [ 654.028911][ T1020] ? lock_downgrade+0x920/0x920 [ 654.028945][ T1020] ? swp_swapcount+0x540/0x540 [ 654.028966][ T1020] ? __kasan_check_read+0x11/0x20 [ 654.028979][ T1020] ? do_raw_spin_unlock+0x57/0x270 [ 654.028997][ T1020] do_wp_page+0x499/0x14d0 [ 654.029037][ T1020] ? finish_mkwrite_fault+0x570/0x570 [ 654.063689][ T1020] __handle_mm_fault+0x22f7/0x3f20 [ 654.069057][ T1020] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 654.075059][ T1020] ? __kasan_check_read+0x11/0x20 [ 654.080234][ T1020] handle_mm_fault+0x1b5/0x6b0 [ 654.085115][ T1020] __do_page_fault+0x536/0xdd0 [ 654.089953][ T1020] do_page_fault+0x38/0x590 [ 654.094549][ T1020] page_fault+0x39/0x40 [ 654.098748][ T1020] RIP: 0033:0x430906 [ 654.102664][ T1020] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 5c 46 64 00 85 c0 0f 84 [ 654.122287][ T1020] RSP: 002b:00007ffc80b788f0 EFLAGS: 00010206 [ 654.128397][ T1020] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 03:36:33 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x20000000, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 03:36:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00'}) [ 654.136407][ T1020] RDX: 00005555572a2930 RSI: 00005555572aa970 RDI: 0000000000000003 [ 654.141614][ T1064] 9pnet: Insufficient options for proto=fd [ 654.144595][ T1020] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555572a1940 [ 654.144605][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 654.144612][ T1020] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 654.151145][ T1020] memory: usage 3992kB, limit 0kB, failcnt 67 [ 654.187022][ T1020] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 654.195424][ T1020] Memory cgroup stats for /syz1: [ 654.195884][ T1020] anon 0 [ 654.195884][ T1020] file 184320 [ 654.195884][ T1020] kernel_stack 0 [ 654.195884][ T1020] slab 4132864 [ 654.195884][ T1020] sock 0 [ 654.195884][ T1020] shmem 0 [ 654.195884][ T1020] file_mapped 0 [ 654.195884][ T1020] file_dirty 0 [ 654.195884][ T1020] file_writeback 0 [ 654.195884][ T1020] anon_thp 0 [ 654.195884][ T1020] inactive_anon 77824 [ 654.195884][ T1020] active_anon 0 [ 654.195884][ T1020] inactive_file 135168 [ 654.195884][ T1020] active_file 135168 [ 654.195884][ T1020] unevictable 4096 [ 654.195884][ T1020] slab_reclaimable 1622016 [ 654.195884][ T1020] slab_unreclaimable 2510848 [ 654.195884][ T1020] pgfault 63294 [ 654.195884][ T1020] pgmajfault 0 [ 654.195884][ T1020] workingset_refault 0 [ 654.195884][ T1020] workingset_activate 0 [ 654.195884][ T1020] workingset_nodereclaim 0 [ 654.195884][ T1020] pgrefill 0 [ 654.195884][ T1020] pgscan 0 [ 654.195884][ T1020] pgsteal 0 [ 654.195884][ T1020] pgactivate 0 03:36:33 executing program 2: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 654.328977][ T1020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1020,uid=0 [ 654.350489][ T1020] Memory cgroup out of memory: Killed process 1020 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 [ 654.368286][ T1054] oom_reaper: reaped process 1020 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 03:36:33 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2d82, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x06\x1e\r', @ifru_flags=0xf2030000}) r1 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/114) 03:36:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00'}) 03:36:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@swidth={'swidth', 0x3d, 0x4}}]}) 03:36:33 executing program 3: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffed8) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getrandom(&(0x7f0000000100)=""/59, 0x3b, 0x2000000003) openat$audio(0xffffffffffffff9c, 0x0, 0x111700, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 03:36:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00'}) [ 655.105608][ T1190] XFS (loop4): sunit and swidth must be specified together [ 655.295562][ T1190] XFS (loop4): sunit and swidth must be specified together 03:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:36:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x351, 0x7ffffffff000) 03:36:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}, [], {0x56}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:36:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00l\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 03:36:35 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2d82, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x06\x1e\r', @ifru_flags=0xf2030000}) r1 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/114) 03:36:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:35 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) 03:36:35 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) 03:36:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x200f) 03:36:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xf010000, 0x0, 0x0, [], 0x0}) [ 656.378160][ T26] audit: type=1804 audit(2000000195.639:127): pid=1216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir860763240/syzkaller.hQqfJO/723/memory.events" dev="sda1" ino=17384 res=1 03:36:35 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) [ 656.492345][ T26] audit: type=1800 audit(2000000195.639:128): pid=1216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17384 res=0 03:36:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 03:36:35 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) 03:36:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 03:36:36 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:36 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) 03:36:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 03:36:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) [ 657.578386][ T26] audit: type=1804 audit(2000000196.839:129): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir860763240/syzkaller.hQqfJO/724/memory.events" dev="sda1" ino=17090 res=1 [ 657.659656][ T26] audit: type=1800 audit(2000000196.839:130): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17090 res=0 [ 657.849672][ T26] audit: type=1804 audit(2000000197.109:131): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir961379290/syzkaller.yXX4ZC/4/memory.events" dev="sda1" ino=17399 res=1 [ 657.901025][ T26] audit: type=1800 audit(2000000197.149:132): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=17399 res=0 [ 658.366337][ T1272] IPVS: ftp: loaded support on port[0] = 21 [ 658.530736][ T1272] chnl_net:caif_netlink_parms(): no params data found [ 658.592587][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.602470][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.611799][ T1272] device bridge_slave_0 entered promiscuous mode [ 658.621248][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.629366][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.638731][ T1272] device bridge_slave_1 entered promiscuous mode [ 658.660015][ T1272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.672254][ T1272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.697623][ T1272] team0: Port device team_slave_0 added [ 658.756455][ T1272] team0: Port device team_slave_1 added [ 658.826375][ T1272] device hsr_slave_0 entered promiscuous mode [ 658.866124][ T1272] device hsr_slave_1 entered promiscuous mode [ 658.914306][ T1272] debugfs: Directory 'hsr0' with parent '/' already present! [ 658.967831][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.975016][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.982650][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.990036][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.086269][ T1272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.107731][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.120730][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.134031][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.146015][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 659.234931][ T1272] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.248648][T23737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.257871][T23737] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.266429][T23737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.284887][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.294306][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.301948][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.351676][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.367957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.379875][T14114] device bridge_slave_1 left promiscuous mode [ 659.386844][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.435521][T14114] device bridge_slave_0 left promiscuous mode [ 659.442213][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.465002][T14114] device hsr_slave_0 left promiscuous mode [ 661.504472][T14114] device hsr_slave_1 left promiscuous mode [ 661.559566][T14114] team0 (unregistering): Port device team_slave_1 removed [ 661.574719][T14114] team0 (unregistering): Port device team_slave_0 removed [ 661.591250][T14114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.662544][T14114] bond0 (unregistering): Released all slaves [ 661.766460][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.798299][ T1272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.826534][ T1272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.846984][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 661.865476][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.889219][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 661.909834][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.926875][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 661.953350][ T1272] 8021q: adding VLAN 0 to HW filter on device batadv0 03:36:41 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) dup2(r2, r1) 03:36:41 executing program 0: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r0, &(0x7f0000000480)={0x0, 0xfffffd4a, &(0x7f0000000180)=[{&(0x7f0000000780)="2f0000001c0005c5ffffff000d000c000200001f01000000fc0003c9130001000300000050000000586700a286cd38", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 03:36:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:41 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:41 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) [ 662.479293][ T26] audit: type=1804 audit(2000000201.739:133): pid=1304 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir961379290/syzkaller.yXX4ZC/5/memory.events" dev="sda1" ino=16801 res=1 [ 662.571644][ T26] audit: type=1800 audit(2000000201.739:134): pid=1304 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16801 res=0 03:36:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xf) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) 03:36:42 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:42 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) [ 663.300950][ T26] audit: type=1804 audit(2000000202.559:135): pid=1305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir860763240/syzkaller.hQqfJO/725/memory.events" dev="sda1" ino=16818 res=1 03:36:42 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/252, 0xfc}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x17, 0x0, 0x1000, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r3, 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a0f, 0x1700) 03:36:42 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) [ 663.479558][ T26] audit: type=1800 audit(2000000202.559:136): pid=1305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16818 res=0 [ 663.742393][ T26] audit: type=1804 audit(2000000202.999:137): pid=1423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir961379290/syzkaller.yXX4ZC/6/memory.events" dev="sda1" ino=16706 res=1 03:36:43 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) dup3(r0, r1, 0x0) [ 663.799718][ T26] audit: type=1800 audit(2000000202.999:138): pid=1423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16706 res=0 [ 663.877228][ T26] audit: type=1804 audit(2000000202.999:139): pid=1564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir860763240/syzkaller.hQqfJO/726/memory.events" dev="sda1" ino=16913 res=1 03:36:43 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:36:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) [ 663.994585][ T26] audit: type=1800 audit(2000000202.999:140): pid=1564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16913 res=0 03:36:43 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:43 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) dup3(r0, r1, 0x0) 03:36:43 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:36:43 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) 03:36:43 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) dup3(r0, r1, 0x0) 03:36:43 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x6400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0xbd}, &(0x7f0000000100)=ANY=[@ANYBLOB="65f7d0b761552916a8686173683d7368613232342d636500000000007d00f3"], 0x0, &(0x7f00000004c0)=""/189) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000580)=""/72, &(0x7f0000000480)=0x48) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="000029bd7000fcdbdf25020000000800020096000000080005000300000014000100ff01000000000000000000000000000108000600e0000000080003000500000014000100ffff8f0000000000000000000000000001080003"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40000) keyctl$invalidate(0x15, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) 03:36:43 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 03:36:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) 03:36:43 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) dup3(r0, r1, 0x0) 03:36:44 executing program 4: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9}, {0x0, 0xbf}], 0x2, 0x0) 03:36:44 executing program 4: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9}, {0x0, 0xbf}], 0x2, 0x0) 03:36:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 03:36:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) 03:36:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x100000001) [ 665.163176][ T1721] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 03:36:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 03:36:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 03:36:44 executing program 4: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9}, {0x0, 0xbf}], 0x2, 0x0) 03:36:44 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x5}, 0x3c) 03:36:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) [ 665.422805][ T1728] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 03:36:44 executing program 4: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9}, {0x0, 0xbf}], 0x2, 0x0) 03:36:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ff00002c000500cf182897f09730af00050000e700000000ffc54c1960dbb7d58259fa3533a055a653b4a421556b3d5df500", 0x39}], 0x1}, 0x0) 03:36:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 03:36:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 03:36:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r1, 0x10d, 0x100000001, 0x0, 0xc) 03:36:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\\x00', 0x4) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7}}, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffffffffffff8, 0x6, 0x7, 0xfffffffffffffffe}, &(0x7f0000000180)=0x98) flock(r1, 0x9) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdee) 03:36:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpid() getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000001040)=0xe8) getresgid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004540), &(0x7f0000004580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0001880000020032d7fe34e8d3714f96d55ca9126479641869cd0050229c34b58374ff030000611d21631f65dc69831186ce248d08b5b9642a28424bd35ae87221887e487306a332f105292bfb3edf19b3b19edf80d3ed25788c247126c58e62098d650b127f6fb2afa04dfe849fe454b2e5e18bb64de2188aa63b4876f7010f8261879dc4c002d3ba91dc666fb2c21e21123f783828d268d5c00a1f950c4202afb689ba06e17e119dca55c5706215ca8b411a8cdd1dc38edbc045c04cefc25bc1816f8748", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x26}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000005000000000000", 0x4c}], 0x1}, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) [ 665.810140][ T1750] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 03:36:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 665.883127][ T1757] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 03:36:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008000)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c00120034c41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r0 = socket(0x2000000000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2000, 0x600000000000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0xfd, 0x0) 03:36:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 03:36:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r1, 0x10d, 0x100000001, 0x0, 0xc) [ 666.129883][ T1766] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 666.179164][ T1770] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 03:36:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)=[{0x18, 0x1, 0x1, "503ac89b"}], 0x18}}], 0x2, 0x0) [ 666.324951][ T1775] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 666.387001][ T1805] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 03:36:45 executing program 5: r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000380)=""/204, 0xfffffffffffffec9, 0x4000000000000000, 0x0) 03:36:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "f4287078dbf39e0b", "d09149e36e57eb89ef8b871b8523152f2aa27c398dc9d41fc7afff6ef95f5ac4", "386b9dd1", "a101372d91547ca1"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x6a07, 0x0) 03:36:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r1, 0x10d, 0x100000001, 0x0, 0xc) 03:36:45 executing program 4: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:46 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\\x00', 0x4) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7}}, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffffffffffff8, 0x6, 0x7, 0xfffffffffffffffe}, &(0x7f0000000180)=0x98) flock(r1, 0x9) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdee) [ 666.700960][ T1910] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 03:36:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x8020000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') setns(r1, 0x0) 03:36:46 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0xc7c2) mq_notify(r0, 0x0) 03:36:46 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "f4287078dbf39e0b", "d09149e36e57eb89ef8b871b8523152f2aa27c398dc9d41fc7afff6ef95f5ac4", "386b9dd1", "a101372d91547ca1"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x6a07, 0x0) 03:36:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r1, 0x10d, 0x100000001, 0x0, 0xc) [ 667.039507][ T1955] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 03:36:46 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0xc7c2) mq_notify(r0, 0x0) 03:36:46 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x2) write$nbd(r0, &(0x7f0000000680)={0x67446698, 0x0, 0x0, 0x0, 0x0, "9ea79410bf5d6c0eab8ab372a7cfd430773243974b682ad53a7437f64a42af0fde33a7c8b755835a6f828afa634597169b178b4fe2775e184267c99b286def50b2f69a5818fc8fd133a8fadc1119f64f7717f62c741b07ca86bf90c9d94b54fcf9473385fc53af75cb4cb5a518dc307091"}, 0x20000701) 03:36:46 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "f4287078dbf39e0b", "d09149e36e57eb89ef8b871b8523152f2aa27c398dc9d41fc7afff6ef95f5ac4", "386b9dd1", "a101372d91547ca1"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x6a07, 0x0) 03:36:46 executing program 2: r0 = socket$inet6(0xa, 0x100000000000802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0xa, 0x0, 0x0, @dev}, 0x1c) 03:36:46 executing program 4: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:46 executing program 0: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\\x00', 0x4) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7}}, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffffffffffff8, 0x6, 0x7, 0xfffffffffffffffe}, &(0x7f0000000180)=0x98) flock(r1, 0x9) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdee) 03:36:47 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0xc7c2) mq_notify(r0, 0x0) 03:36:47 executing program 4: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:47 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "f4287078dbf39e0b", "d09149e36e57eb89ef8b871b8523152f2aa27c398dc9d41fc7afff6ef95f5ac4", "386b9dd1", "a101372d91547ca1"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x6a07, 0x0) 03:36:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:47 executing program 0: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:47 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0xc7c2) mq_notify(r0, 0x0) 03:36:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:47 executing program 0: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:47 executing program 4: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x2a9}, {0x0, 0x19}], 0x2, 0x0) 03:36:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0xfffffffffffffe30) syz_genetlink_get_family_id$tipc2(0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x52) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x2, 0x0, 0x1a) 03:36:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\\x00', 0x4) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7}}, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffffffffffff8, 0x6, 0x7, 0xfffffffffffffffe}, &(0x7f0000000180)=0x98) flock(r1, 0x9) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdee) 03:36:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 03:36:48 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000001b40)='12\n.0.0.1\x00', &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)='9p\x00', 0x0, &(0x7f0000001c00)={'trans=rdma,', {'port'}}) 03:36:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100040c10000000000001400000", 0x58}], 0x1) 03:36:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 668.973922][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:36:48 executing program 0: r0 = socket(0x15, 0x80005, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) 03:36:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) 03:36:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd821cfcc1780e4bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 03:36:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000078c0)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003100)=[{0x0, 0x0, 0x0}], 0x500, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000007800), 0x4) io_setup(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 03:36:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) [ 671.155314][T14114] device bridge_slave_1 left promiscuous mode [ 671.161605][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.225096][T14114] device bridge_slave_0 left promiscuous mode [ 671.231358][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.234881][T14114] device hsr_slave_0 left promiscuous mode [ 673.274308][T14114] device hsr_slave_1 left promiscuous mode [ 673.332420][T14114] team0 (unregistering): Port device team_slave_1 removed [ 673.350505][T14114] team0 (unregistering): Port device team_slave_0 removed [ 673.362055][T14114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.399772][T14114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.493690][T14114] bond0 (unregistering): Released all slaves 03:36:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2000000015) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000740)={@multicast2, @local}, 0xc) 03:36:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd821cfcc1780e4bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 03:36:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) 03:36:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 03:36:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd821cfcc1780e4bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 03:36:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) 03:36:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd821cfcc1780e4bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 03:36:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 03:36:54 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) 03:36:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000440), 0x0) 03:36:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:54 executing program 0: clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10001) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xa9d0) fallocate(r1, 0x3, 0x8002, 0x2) fallocate(r1, 0x3, 0x5e89, 0xfff9) 03:36:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 03:36:55 executing program 0: clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10001) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xa9d0) fallocate(r1, 0x3, 0x8002, 0x2) fallocate(r1, 0x3, 0x5e89, 0xfff9) 03:36:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000440), 0x0) 03:36:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 03:36:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000440), 0x0) 03:36:55 executing program 0: clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10001) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xa9d0) fallocate(r1, 0x3, 0x8002, 0x2) fallocate(r1, 0x3, 0x5e89, 0xfff9) 03:36:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:36:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000440), 0x0) 03:36:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:55 executing program 0: clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x10001) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xa9d0) fallocate(r1, 0x3, 0x8002, 0x2) fallocate(r1, 0x3, 0x5e89, 0xfff9) 03:36:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000028c0)='/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3 \xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xce$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8d\xcf\x12\xacQH\xc5{Q\x15\x89\xcb`6g?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\x0f\x9e\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&F\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e', 0x0) ftruncate(r1, 0xfffffd) sendfile(r0, r1, &(0x7f00000037c0), 0xfffffdef) 03:36:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 03:36:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0xa02) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000bebdf07f}) 03:36:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3e, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @initdev}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:36:56 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 03:36:56 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb, 0xe}}) 03:36:56 executing program 1: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff84, 0x0, 0x0, 0x0, 0x11, 0x20014045}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 03:36:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00010000000000000000e70200000014000100ffffffff90008000000000000000000197bcdcbb1e6bfa5fb9ee64c3ba08d44af37f6219962909fc7f832d64737b8da6611d8d627a1e181392150f22df931a58be448e739e387128bc7695b1ef7e8d822e762a347511bf56b2cadd2e792395158cf5c579b033b6694f5aa9c3e51198b36f89d248d26141b6ec1361b8b0a10d60ee326c"], 0x28}}, 0x0) 03:36:56 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 03:36:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff84, 0x0, 0x0, 0x0, 0x11, 0x20014045}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 03:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900030005004042020058", 0x1f}], 0x1) 03:36:56 executing program 1: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:56 executing program 0: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00010000000000000000e70200000014000100ffffffff90008000000000000000000197bcdcbb1e6bfa5fb9ee64c3ba08d44af37f6219962909fc7f832d64737b8da6611d8d627a1e181392150f22df931a58be448e739e387128bc7695b1ef7e8d822e762a347511bf56b2cadd2e792395158cf5c579b033b6694f5aa9c3e51198b36f89d248d26141b6ec1361b8b0a10d60ee326c"], 0x28}}, 0x0) 03:36:57 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 03:36:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff84, 0x0, 0x0, 0x0, 0x11, 0x20014045}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) [ 677.820932][ T2911] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 03:36:57 executing program 0: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00010000000000000000e70200000014000100ffffffff90008000000000000000000197bcdcbb1e6bfa5fb9ee64c3ba08d44af37f6219962909fc7f832d64737b8da6611d8d627a1e181392150f22df931a58be448e739e387128bc7695b1ef7e8d822e762a347511bf56b2cadd2e792395158cf5c579b033b6694f5aa9c3e51198b36f89d248d26141b6ec1361b8b0a10d60ee326c"], 0x28}}, 0x0) [ 677.945423][ T2916] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 03:36:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff84, 0x0, 0x0, 0x0, 0x11, 0x20014045}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 03:36:57 executing program 3: setreuid(0x0, 0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setresuid(r1, 0x0, r1) 03:36:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb72e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe34}, 0x48) 03:36:57 executing program 0: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00010000000000000000e70200000014000100ffffffff90008000000000000000000197bcdcbb1e6bfa5fb9ee64c3ba08d44af37f6219962909fc7f832d64737b8da6611d8d627a1e181392150f22df931a58be448e739e387128bc7695b1ef7e8d822e762a347511bf56b2cadd2e792395158cf5c579b033b6694f5aa9c3e51198b36f89d248d26141b6ec1361b8b0a10d60ee326c"], 0x28}}, 0x0) 03:36:58 executing program 1: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:36:58 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 03:36:58 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:36:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x0) write(r2, &(0x7f0000000180)="008c", 0x2) sendfile(r1, r2, &(0x7f0000000000), 0x7) dup3(r2, r0, 0x0) 03:36:58 executing program 3: epoll_wait(0xffffffffffffffff, 0xfffffffffffffffd, 0x460, 0x0) 03:36:58 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:36:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, 0x0, r1, r2) 03:36:58 executing program 1: shmctl$IPC_RMID(0x0, 0x204) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) 03:36:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:58 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:36:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:36:59 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), {0xfff, 0x7fffffff, 0x35315241}}) 03:36:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 03:36:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:36:59 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), {0xfff, 0x7fffffff, 0x35315241}}) 03:36:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:36:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:36:59 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), {0xfff, 0x7fffffff, 0x35315241}}) 03:36:59 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), {0xfff, 0x7fffffff, 0x35315241}}) 03:36:59 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:36:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={r1, r2, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x8d36f51e7408a4b6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0xe, 0x4b, &(0x7f0000000880)) write$cgroup_int(r3, &(0x7f0000000540)=0x80000000, 0x12) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="006d256d55b60f55ff73e98d5f1a72792014c97102e1b54f54a8ffa51a779119dabc2cfbe3a08394dd5cdf4750466dc01e85755aa6771a5f83d271fe5a16cf3f2c59087cb8521039d6e338f0ac9ee2ff89d1264bf0ee529ecb1fe7c7000000000000"], 0xe378) socketpair(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/119, 0x77}], 0x3, &(0x7f0000000240)=""/106, 0x6a}, 0x2001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, &(0x7f0000000400)="de156d31c5b6c587f4d6b29d5cabaef897b358c876761a376a9faf9c9910b199a2c98bc43cba5a0b8017631952dc37b2bcb5e0b1360c7a9fcaaa7f1a4124885c68d72e58bfe377e25d2d1887871938a00f7af7efcd18fd83245c8cdf5805b824937e3d16d6856641fe112487a2d7", 0x0}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000008c0)) openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) 03:37:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002b008163e45ae087000000000b0f0000000000bc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0) 03:37:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:37:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:37:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0xbeeebf34560d4d06, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfa9d, 0x0, 0x616, 0xfffffffffffffe01, 0x3bca, 0x0, 0x100, 0x0, 0x8000000100000, 0x1ff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xffffffffffff0001, 0x9, 0x10001, 0x0, 0x7, 0x4, 0xf8e, 0x8, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb5a, 0x10001, 0x0, 0x1, 0x3ff, 0x10001}, r0, 0x0, r0, 0x4) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x4, 0x70, 0x5, 0x4a30, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x100000001, 0x7, 0xffffffffffff0000, 0xfbe1, 0x3, 0x100, 0x1000, 0x3, 0x0, 0xfffffffffffffff7, 0x0, 0x8000, 0x5000000000, 0x0, 0x9, 0x2, 0xfffffffffffff001, 0x101, 0x80000000, 0x7, 0x1000, 0x800, 0x10000, 0x7fff, 0x3, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x4, 0x0, 0x6, 0xc2b}, 0x0, 0xa, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00706964732011"], 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f0000000780)=@in6={0xa, 0x4e23, 0x59e4, @remote}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 03:37:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0xff2, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000bfcffc), &(0x7f0000000240)=0xffffffffffffff3a) 03:37:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:37:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:37:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:00 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 03:37:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0xbeeebf34560d4d06, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfa9d, 0x0, 0x616, 0xfffffffffffffe01, 0x3bca, 0x0, 0x100, 0x0, 0x8000000100000, 0x1ff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xffffffffffff0001, 0x9, 0x10001, 0x0, 0x7, 0x4, 0xf8e, 0x8, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb5a, 0x10001, 0x0, 0x1, 0x3ff, 0x10001}, r0, 0x0, r0, 0x4) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x4, 0x70, 0x5, 0x4a30, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x100000001, 0x7, 0xffffffffffff0000, 0xfbe1, 0x3, 0x100, 0x1000, 0x3, 0x0, 0xfffffffffffffff7, 0x0, 0x8000, 0x5000000000, 0x0, 0x9, 0x2, 0xfffffffffffff001, 0x101, 0x80000000, 0x7, 0x1000, 0x800, 0x10000, 0x7fff, 0x3, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x4, 0x0, 0x6, 0xc2b}, 0x0, 0xa, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00706964732011"], 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f0000000780)=@in6={0xa, 0x4e23, 0x59e4, @remote}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 03:37:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x80000008, 0x0, 0x362) 03:37:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:01 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "f4287078dbf39e0b", "d09149e36e57eb89ef8b871b8523152f2aa27c398dc9d41fc7afff6ef95f5ac4", "386b9dd1", "a101372d91547ca1"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x6a07, 0x0) 03:37:01 executing program 3: r0 = getpgrp(0xffffffffffffffff) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)) 03:37:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0xbeeebf34560d4d06, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfa9d, 0x0, 0x616, 0xfffffffffffffe01, 0x3bca, 0x0, 0x100, 0x0, 0x8000000100000, 0x1ff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xffffffffffff0001, 0x9, 0x10001, 0x0, 0x7, 0x4, 0xf8e, 0x8, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb5a, 0x10001, 0x0, 0x1, 0x3ff, 0x10001}, r0, 0x0, r0, 0x4) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x4, 0x70, 0x5, 0x4a30, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x100000001, 0x7, 0xffffffffffff0000, 0xfbe1, 0x3, 0x100, 0x1000, 0x3, 0x0, 0xfffffffffffffff7, 0x0, 0x8000, 0x5000000000, 0x0, 0x9, 0x2, 0xfffffffffffff001, 0x101, 0x80000000, 0x7, 0x1000, 0x800, 0x10000, 0x7fff, 0x3, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x4, 0x0, 0x6, 0xc2b}, 0x0, 0xa, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00706964732011"], 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f0000000780)=@in6={0xa, 0x4e23, 0x59e4, @remote}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 03:37:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x18000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1) write$UHID_CREATE(r0, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/11, 0xb, 0x10000000000}, 0x120) close(r0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000400)={{0x0, 0x8}, 'port0\x00'}) seccomp(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:01 executing program 3: mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2) [ 682.615802][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.623225][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.638869][ T26] audit: type=1326 audit(2000000221.899:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3111 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 682.679008][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.697804][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.711608][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.723852][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.737561][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.748713][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.756647][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.764510][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.772027][ T9055] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 682.799877][ T9055] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 03:37:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0xbeeebf34560d4d06, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfa9d, 0x0, 0x616, 0xfffffffffffffe01, 0x3bca, 0x0, 0x100, 0x0, 0x8000000100000, 0x1ff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xffffffffffff0001, 0x9, 0x10001, 0x0, 0x7, 0x4, 0xf8e, 0x8, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb5a, 0x10001, 0x0, 0x1, 0x3ff, 0x10001}, r0, 0x0, r0, 0x4) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x4, 0x70, 0x5, 0x4a30, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x100000001, 0x7, 0xffffffffffff0000, 0xfbe1, 0x3, 0x100, 0x1000, 0x3, 0x0, 0xfffffffffffffff7, 0x0, 0x8000, 0x5000000000, 0x0, 0x9, 0x2, 0xfffffffffffff001, 0x101, 0x80000000, 0x7, 0x1000, 0x800, 0x10000, 0x7fff, 0x3, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x4, 0x0, 0x6, 0xc2b}, 0x0, 0xa, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00706964732011"], 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f0000000780)=@in6={0xa, 0x4e23, 0x59e4, @remote}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 03:37:02 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8500000007000000250000000000000095000000000000008f5e83c2fe2e004bf3f7ca4ada77e2df8cf88a25bff53f85ec91b41097badd4ab94c72e76c231210b4ff389dbd820a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) 03:37:02 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 03:37:02 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xa}, 0x3}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000000080)="b9", 0x1}], 0x1}}], 0x1, 0x0) 03:37:02 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xa}, 0x3}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000000080)="b9", 0x1}], 0x1}}], 0x1, 0x0) 03:37:02 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8500000007000000250000000000000095000000000000008f5e83c2fe2e004bf3f7ca4ada77e2df8cf88a25bff53f85ec91b41097badd4ab94c72e76c231210b4ff389dbd820a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) [ 683.203640][ T3137] device nr0 entered promiscuous mode 03:37:02 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) [ 683.307283][ T26] audit: type=1326 audit(2000000222.569:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3111 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 683.389447][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.436591][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.451172][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.460716][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.476855][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.490522][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.503684][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.520609][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.532738][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 03:37:02 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xa}, 0x3}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000000080)="b9", 0x1}], 0x1}}], 0x1, 0x0) [ 683.547924][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.560284][T23737] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 683.604286][T23737] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 03:37:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x18000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1) write$UHID_CREATE(r0, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/11, 0xb, 0x10000000000}, 0x120) close(r0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000400)={{0x0, 0x8}, 'port0\x00'}) seccomp(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:03 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8500000007000000250000000000000095000000000000008f5e83c2fe2e004bf3f7ca4ada77e2df8cf88a25bff53f85ec91b41097badd4ab94c72e76c231210b4ff389dbd820a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) 03:37:03 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xa}, 0x3}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000000080)="b9", 0x1}], 0x1}}], 0x1, 0x0) [ 683.979705][ T26] audit: type=1326 audit(2000000223.239:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3176 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 03:37:03 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:03 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8500000007000000250000000000000095000000000000008f5e83c2fe2e004bf3f7ca4ada77e2df8cf88a25bff53f85ec91b41097badd4ab94c72e76c231210b4ff389dbd820a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) 03:37:03 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204f0ff02000270fff8", 0xffffffb6}], 0x8004, 0x0) 03:37:03 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 03:37:03 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 03:37:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x18000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1) write$UHID_CREATE(r0, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/11, 0xb, 0x10000000000}, 0x120) close(r0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000400)={{0x0, 0x8}, 'port0\x00'}) seccomp(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 684.851574][ T3202] device nr0 entered promiscuous mode [ 685.045872][ T26] audit: type=1326 audit(2000000224.309:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3217 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 03:37:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204f0ff02000270fff8", 0xffffffb6}], 0x8004, 0x0) 03:37:05 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 03:37:05 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) [ 685.760479][ T3216] device nr0 entered promiscuous mode 03:37:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x18000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1) write$UHID_CREATE(r0, &(0x7f0000000580)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/11, 0xb, 0x10000000000}, 0x120) close(r0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000400)={{0x0, 0x8}, 'port0\x00'}) seccomp(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 686.071881][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.080771][ T26] audit: type=1326 audit(2000000225.339:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3368 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 686.116948][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.155219][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.189333][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.220706][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.261434][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.298656][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.316481][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.343453][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.373717][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.429798][T23737] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 686.478907][T23737] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 03:37:05 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:06 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204f0ff02000270fff8", 0xffffffb6}], 0x8004, 0x0) 03:37:06 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000002480)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x7}) sendfile(r0, r3, 0x0, 0x8000fffffffa) [ 687.084968][ T3381] device nr0 entered promiscuous mode 03:37:06 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) [ 687.297267][ T26] audit: type=1804 audit(2000000226.559:146): pid=3394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/816/bus" dev="sda1" ino=17463 res=1 [ 687.366810][ T26] audit: type=1804 audit(2000000226.629:147): pid=3398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/816/bus" dev="sda1" ino=17463 res=1 03:37:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$PPPIOCSMRU(r1, 0x80047453, 0x0) 03:37:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:37:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204f0ff02000270fff8", 0xffffffb6}], 0x8004, 0x0) [ 688.087129][ T3419] device nr0 entered promiscuous mode 03:37:07 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 03:37:07 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 688.682677][ T3439] device nr0 entered promiscuous mode 03:37:08 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:08 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:08 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="bc5a0bbe33bd6adaa841b0c507c44ea7763af8c2c7c65070d0333d1cc938c16a87", 0x21}, {&(0x7f00000007c0)="da813e7d25504e020ca1326cbdd7afbeb739daf58349b0d223492326d6c111b18fc2473d006f5a8a69488fc01fcd9c74a96e64cae4fce1d5f7858e070e9f67dc1885e4da0ab5fc9310a38c0cc26446da24fda42b22f337f8cf45f7efdc506caecb81d12a72e19245d79c4e612af0dd64405e93193bdd8cca84f9bd8144c5df4a605361d11d8ecc0f9ea0abfc94c8363a6cf5aee8939bf0c080f56d2aacb18733db3a062189006b5a53b4f335df622a509c97d9681eb42c23925dcc68f69cf3c835454452272d7cd2c500", 0xca}, {&(0x7f0000000980)}, {&(0x7f0000000a40)}, {0x0}], 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32=r0, @ANYBLOB="9800000000000000010000000100000084daaaeb42b172de0cf236998dc50ca1305fbdd3b0b142e9168e76b60f537d94ea5b60d04856c55cc29b9e5e8c7b8cafddf289d9e887316604c3297d456dabcdc273f85f832067d20a68025d48f1317870c4e344400abf4d540b2758eaa2b77c3d04ab19aade8d30d7832c83fabea267ba77cdcf48c532f3a9fa71a097eb9bb1376d10f1833f49d66ffd43a82eeb508e06667d070dee583445e0826fdd9ef213a1cf1f897823ae03df3208e6719a3733a12d8b8ed3c3eb3b8a81936f7a9b6e06c3037347b9761093d48ea7cf549036a7", @ANYRES32=r1, @ANYRES32], 0x11e}, 0x20044014) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7fffffff, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 03:37:08 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:08 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:37:08 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:09 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:09 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b59c007110000f30501000b000200006872cc0538cf", 0x1f) 03:37:09 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:09 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) [ 689.960091][ T3591] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:09 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:09 executing program 4: r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 03:37:09 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:09 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 03:37:09 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:37:10 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r2, 0xab) sendmsg(r1, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r1, r3}) close(r4) 03:37:10 executing program 4: r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 03:37:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_genetlink_get_family_id$ipvs(0x0) io_setup(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @multicast2}], 0x3c) 03:37:10 executing program 4: r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 03:37:10 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0xfffffffffffffffd, &(0x7f0000000200)) 03:37:10 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)=0x32) close(r0) 03:37:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=0x46) 03:37:10 executing program 4: r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 03:37:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_genetlink_get_family_id$ipvs(0x0) io_setup(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @multicast2}], 0x3c) 03:37:10 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x44043) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x95, "3fb08321c44c29375d2ce55a59af6a5c1b21cf0055f05ff2a8abf5f06b603d0477ed6bad045d387819bc70604cd0ab1414168d5a0703c6fddb2c48b3d8c57fab07a0476f4789086fdec8d2991969c972c80ff2782f031d188ba5c636efa26574fd50fea6004c27130b6b54b5777f11fc872932a514e6b34f4b729b3ccff04591d615ded4b4dd835e37754bdd68e187cf379864056b"}, &(0x7f00000001c0)=0xb9) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x4f641b8da840cbdd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000580)=0x14c) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) 03:37:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x400, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0x2], [], @initdev}}, 0x1c) 03:37:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000080)) 03:37:11 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800400000009031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) msync(&(0x7f00007ea000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 03:37:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x161, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:37:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x44043) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x95, "3fb08321c44c29375d2ce55a59af6a5c1b21cf0055f05ff2a8abf5f06b603d0477ed6bad045d387819bc70604cd0ab1414168d5a0703c6fddb2c48b3d8c57fab07a0476f4789086fdec8d2991969c972c80ff2782f031d188ba5c636efa26574fd50fea6004c27130b6b54b5777f11fc872932a514e6b34f4b729b3ccff04591d615ded4b4dd835e37754bdd68e187cf379864056b"}, &(0x7f00000001c0)=0xb9) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x4f641b8da840cbdd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000580)=0x14c) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) 03:37:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x161, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 692.044152][ T26] audit: type=1800 audit(2000000231.299:148): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16882 res=0 03:37:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000080)) [ 692.188728][ T26] audit: type=1804 audit(2000000231.439:149): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/822/bus" dev="sda1" ino=16882 res=1 03:37:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x161, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 692.373440][ T26] audit: type=1804 audit(2000000231.629:150): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/822/bus" dev="sda1" ino=16882 res=1 [ 692.487810][ T26] audit: type=1800 audit(2000000231.659:151): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16882 res=0 03:37:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_genetlink_get_family_id$ipvs(0x0) io_setup(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @multicast2}], 0x3c) 03:37:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000080)) 03:37:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x161, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:37:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x44043) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x95, "3fb08321c44c29375d2ce55a59af6a5c1b21cf0055f05ff2a8abf5f06b603d0477ed6bad045d387819bc70604cd0ab1414168d5a0703c6fddb2c48b3d8c57fab07a0476f4789086fdec8d2991969c972c80ff2782f031d188ba5c636efa26574fd50fea6004c27130b6b54b5777f11fc872932a514e6b34f4b729b3ccff04591d615ded4b4dd835e37754bdd68e187cf379864056b"}, &(0x7f00000001c0)=0xb9) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x4f641b8da840cbdd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000580)=0x14c) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) [ 692.613415][ T26] audit: type=1804 audit(2000000231.659:152): pid=3896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/822/bus" dev="sda1" ino=16882 res=1 [ 692.772832][ T26] audit: type=1800 audit(2000000231.989:153): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16706 res=0 [ 692.867882][ T26] audit: type=1804 audit(2000000232.129:154): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir206830966/syzkaller.dFr4OL/823/bus" dev="sda1" ino=16706 res=1 03:37:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:12 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x44043) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x95, "3fb08321c44c29375d2ce55a59af6a5c1b21cf0055f05ff2a8abf5f06b603d0477ed6bad045d387819bc70604cd0ab1414168d5a0703c6fddb2c48b3d8c57fab07a0476f4789086fdec8d2991969c972c80ff2782f031d188ba5c636efa26574fd50fea6004c27130b6b54b5777f11fc872932a514e6b34f4b729b3ccff04591d615ded4b4dd835e37754bdd68e187cf379864056b"}, &(0x7f00000001c0)=0xb9) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x4f641b8da840cbdd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000580)=0x14c) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) 03:37:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, &(0x7f0000000080)) 03:37:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020029bd7000fedbdf2503000000cc0004004c00070008000300ffffffff08000300de00000008000f0000080004000200000008000300d9030000080001001800000008000100140000000004000800797a3000000000440007000626080001000900000008200120040000000890660af5ca0ff6bc0002000000000008000200ff070000080001000d0400000000070000533cdef0ff0200080000000c00010073797a76dccf1bb9a33c61358397177b31000000000c00010073797a31000000001400090062726f6171d0d6490b21d1d3b4b17d77fb854c19d31c18e7a0cbbfee97131edc98993cf55676fcbc453fa99779f2f4633cd2a27e077e042a777129fb7e2722a3aed2afbe03852a9deaac55e2b4935e0f698b622ee34faee766b91d4245c6ef65c952bb2b2bac23ef8d14d88d92547f3e66ffa554c6ec7de1a3c3c2cc0c3f41a50000f77a91126c14b62e048ee86677e4155d9741ca7ea52761"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) [ 693.372919][ T26] audit: type=1800 audit(2000000232.629:155): pid=4033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16627 res=0 [ 693.437706][ T26] audit: type=1800 audit(2000000232.659:156): pid=4035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16609 res=0 03:37:12 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x2000000002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_int(r0, 0x1f00000000000000, 0xcc, &(0x7f0000000000), 0x3c) [ 693.557307][ T26] audit: type=1804 audit(2000000232.789:157): pid=4033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir860763240/syzkaller.hQqfJO/766/bus" dev="sda1" ino=16627 res=1 03:37:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_genetlink_get_family_id$ipvs(0x0) io_setup(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @multicast2}], 0x3c) 03:37:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) 03:37:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1b0000001a000100000000000000a0008000000000000080000000", 0x1b) 03:37:13 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000]}, 0x2c) syz_open_procfs(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x8000000002000) [ 695.008285][ T4274] usb usb7: check_ctrlrecip: process 4274 (syz-executor.1) requesting ep 01 but needs 81 [ 695.059025][ T4274] usb usb7: usbfs: process 4274 (syz-executor.1) did not claim interface 0 before use 03:37:14 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r0, 0x9) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00'/12) creat(&(0x7f0000000280)='./bus\x00', 0x8) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4dc) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @remote}, &(0x7f0000000640)=0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) socket$inet6(0xa, 0x8, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0)) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x4000040f9, @loopback, 0x100000000}, 0xff55) r4 = syz_open_procfs(r2, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\x00\xdcK\r\x8d\xae\x98&@\xd0\xe6\x18\xc3\xa6nYn\x1c\x92\xde\x0e\xaa1\x91~X\xd6\x16kd\xa7\xce+\xcd\xc2z\x15\x8cZ\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\xa2\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) 03:37:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:14 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote, @default, @null, @bcast]}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)=0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 03:37:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) 03:37:14 executing program 5: socketpair$unix(0x1, 0x200001000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x8000000002000) 03:37:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:14 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote, @default, @null, @bcast]}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)=0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 03:37:14 executing program 5: socketpair$unix(0x1, 0x200001000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x8000000002000) [ 695.542223][ T4342] usb usb7: check_ctrlrecip: process 4342 (syz-executor.1) requesting ep 01 but needs 81 [ 695.593390][ T4342] usb usb7: usbfs: process 4342 (syz-executor.1) did not claim interface 0 before use 03:37:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:15 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:37:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:15 executing program 5: socketpair$unix(0x1, 0x200001000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x8000000002000) 03:37:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000200)={0xa0}, 0xa0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 03:37:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 03:37:15 executing program 5: syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) 03:37:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) [ 696.357722][ T4471] hfs: invalid uid -1 [ 696.361792][ T4471] hfs: unable to parse mount options [ 696.512680][ T4471] hfs: invalid uid -1 [ 696.527963][ T4471] hfs: unable to parse mount options 03:37:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e000014000000000000000004000005000600008000000a000000000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500008000000a00000000000000fe8000000000000000000000000100ff0000000000000000"], 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 03:37:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, &(0x7f0000005200)=""/4096) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) 03:37:16 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:37:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e000014000000000000000004000005000600008000000a000000000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500008000000a00000000000000fe8000000000000000000000000100ff0000000000000000"], 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:16 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0xa02) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f00000000c0)={0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x200000000000000}) 03:37:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000052008100a00f80ecdb4cb9040a4865160b000100feffffff000004000200000040d819a9ffe200000000", 0x2e}], 0x1}, 0x0) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e000014000000000000000004000005000600008000000a000000000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500008000000a00000000000000fe8000000000000000000000000100ff0000000000000000"], 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 697.368374][ T4609] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.505460][ T1053] INFO: task syz-executor.4:4476 can't die for more than 143 seconds. [ 854.513850][ T1053] syz-executor.4 R running task 26392 4476 9056 0x00004006 [ 854.528317][ T1053] Call Trace: [ 854.531654][ T1053] ? snd_seq_control_queue+0x22b/0x9a0 [ 854.537855][ T1053] ? __schedule+0x6f9/0x1580 [ 854.542476][ T1053] ? __kasan_check_read+0x11/0x20 [ 854.548110][ T1053] ? mark_lock+0xc0/0x11e0 [ 854.552564][ T1053] ? mark_held_locks+0xa4/0xf0 [ 854.557928][ T1053] ? __kasan_check_read+0x11/0x20 [ 854.563000][ T1053] ? __kasan_check_read+0x11/0x20 [ 854.568635][ T1053] ? mark_lock+0xc0/0x11e0 [ 854.573081][ T1053] ? __kasan_check_write+0x14/0x20 [ 854.578814][ T1053] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 854.584931][ T1053] ? __sanitizer_cov_trace_switch+0x37/0x80 [ 854.591054][ T1053] ? trace_hardirqs_on_caller+0x6a/0x240 [ 854.597290][ T1053] ? lock_downgrade+0x920/0x920 [ 854.602355][ T1053] ? __kasan_check_read+0x11/0x20 [ 854.608897][ T1053] ? snd_seq_client_use_ptr+0xa1/0x3f0 [ 854.616273][ T1053] ? __kasan_check_read+0x11/0x20 [ 854.621506][ T1053] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 854.631956][ T1053] ? snd_seq_cell_alloc.isra.0+0x35d/0x670 [ 854.639993][ T1053] ? snd_seq_check_queue.part.0+0x283/0x360 [ 854.650626][ T1053] ? mark_held_locks+0xf0/0xf0 [ 854.657693][ T1053] ? mark_held_locks+0xa4/0xf0 [ 854.662607][ T1053] ? rwlock_bug.part.0+0x90/0x90 [ 854.673267][ T1053] ? mark_lock+0xc0/0x11e0 [ 854.680191][ T1053] ? snd_seq_write+0x740/0x740 [ 854.689722][ T1053] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 854.698106][ T1053] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 854.703975][ T1053] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 854.716444][ T1053] ? snd_seq_check_queue.part.0+0x11e/0x360 [ 854.722696][ T1053] ? snd_seq_enqueue_event+0x1fb/0x4c0 [ 854.731899][ T1053] ? snd_seq_client_enqueue_event.constprop.0+0x234/0x470 [ 854.742602][ T1053] ? snd_seq_kernel_client_dispatch+0x180/0x180 [ 854.760345][ T1053] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 854.767006][ T1053] ? snd_seq_write+0x40b/0x740 [ 854.771850][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 854.785043][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 854.791363][ T1053] ? __vfs_write+0x22/0x110 [ 854.801711][ T1053] ? __vfs_write+0x8a/0x110 [ 854.807819][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 854.819706][ T1053] ? vfs_write+0x268/0x5d0 [ 854.825750][ T1053] ? ksys_write+0x220/0x290 [ 854.830484][ T1053] ? __ia32_sys_read+0xb0/0xb0 [ 854.841114][ T1053] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 854.848150][ T1053] ? do_syscall_64+0x26/0x760 [ 854.852895][ T1053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 854.866030][ T1053] ? do_syscall_64+0x26/0x760 [ 854.870804][ T1053] ? __x64_sys_write+0x73/0xb0 [ 854.880420][ T1053] ? do_syscall_64+0xfa/0x760 [ 854.888328][ T1053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 854.899519][ T1053] [ 854.899519][ T1053] Showing all locks held in the system: [ 854.910391][ T1053] 1 lock held by khungtaskd/1053: [ 854.920340][ T1053] #0: 00000000bb1aeb75 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 854.930194][ T1053] 2 locks held by getty/9001: [ 854.941248][ T1053] #0: 00000000b977bef6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 854.950477][ T1053] #1: 000000007d862e3e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 854.970954][ T1053] 2 locks held by getty/9002: [ 854.975734][ T1053] #0: 00000000fc473b78 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 854.991305][ T1053] #1: 000000005c23d04c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.002337][ T1053] 2 locks held by getty/9003: [ 855.013550][ T1053] #0: 0000000021bd35c4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 855.023183][ T1053] #1: 000000007f7605be (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.039258][ T1053] 2 locks held by getty/9004: [ 855.043959][ T1053] #0: 00000000656636b8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 855.060068][ T1053] #1: 00000000440bf109 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.070477][ T1053] 2 locks held by getty/9005: [ 855.081963][ T1053] #0: 00000000dc74f3bc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 855.091919][ T1053] #1: 0000000029b199aa (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.108740][ T1053] 2 locks held by getty/9006: [ 855.113524][ T1053] #0: 0000000035158e0c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 855.130846][ T1053] #1: 00000000840e7195 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.142337][ T1053] 2 locks held by getty/9007: [ 855.152726][ T1053] #0: 00000000ca1e1d7e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 855.169953][ T1053] #1: 000000008c444ab2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 855.180922][ T1053] 1 lock held by syz-executor.4/4476: [ 855.193416][ T1053] [ 855.196233][ T1053] ============================================= [ 855.196233][ T1053] [ 855.211844][ T1053] NMI backtrace for cpu 1 [ 855.216549][ T1053] CPU: 1 PID: 1053 Comm: khungtaskd Not tainted 5.3.0-rc1-next-20190725 #51 [ 855.225237][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.236616][ T1053] Call Trace: [ 855.240024][ T1053] dump_stack+0x172/0x1f0 [ 855.244384][ T1053] nmi_cpu_backtrace.cold+0x70/0xb2 [ 855.249857][ T1053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.256279][ T1053] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 855.261939][ T1053] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 855.268126][ T1053] arch_trigger_cpumask_backtrace+0x14/0x20 [ 855.274372][ T1053] watchdog+0xc54/0x1320 [ 855.278885][ T1053] kthread+0x361/0x430 [ 855.282981][ T1053] ? reset_hung_task_detector+0x30/0x30 [ 855.288861][ T1053] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 855.295279][ T1053] ret_from_fork+0x24/0x30 [ 855.300106][ T1053] Sending NMI from CPU 1 to CPUs 0: [ 855.306678][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.046 msecs [ 855.307423][ T1053] NMI backtrace for cpu 0 [ 855.307431][ T1053] CPU: 0 PID: 4476 Comm: syz-executor.4 Not tainted 5.3.0-rc1-next-20190725 #51 [ 855.307438][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.307444][ T1053] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 855.307457][ T1053] Code: 8b 4d 08 e8 18 ff ff ff 5d c3 66 0f 1f 44 00 00 55 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 48 89 e5 48 8b 4d 08 e8 f6 fe ff ff <5d> c3 0f 1f 40 00 55 0f b7 d6 0f b7 f7 bf 03 00 00 00 48 89 e5 48 [ 855.307462][ T1053] RSP: 0018:ffff8880ae8096b0 EFLAGS: 00000006 [ 855.307471][ T1053] RAX: 0000000080010001 RBX: 0000000000000001 RCX: ffffffff818c3343 [ 855.307477][ T1053] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 855.307483][ T1053] RBP: ffff8880ae8096b0 R08: ffff8880a7c58380 R09: ffffed1015d06c9c [ 855.307488][ T1053] R10: ffffed1015d06c9b R11: ffff8880ae8364db R12: 0000000000000000 [ 855.307494][ T1053] R13: 0000000000000001 R14: ffff8880ae809a58 R15: ffff888064c0fa08 [ 855.307501][ T1053] FS: 00007f8dde44a700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 855.307506][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.307512][ T1053] CR2: ffffffffff600400 CR3: 0000000095b4a000 CR4: 00000000001406f0 [ 855.307518][ T1053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.307524][ T1053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.307527][ T1053] Call Trace: [ 855.307530][ T1053] [ 855.307534][ T1053] perf_output_begin_forward+0x843/0xb00 [ 855.307539][ T1053] ? perf_prepare_sample+0x1570/0x1570 [ 855.307543][ T1053] ? mark_lock+0xc0/0x11e0 [ 855.307547][ T1053] ? perf_event_output_forward+0x18f/0x290 [ 855.307551][ T1053] ? perf_output_copy+0x210/0x210 [ 855.307555][ T1053] ? __kasan_check_read+0x11/0x20 [ 855.307559][ T1053] ? __lock_acquire+0x1702/0x4c30 [ 855.307563][ T1053] ? lock_downgrade+0x920/0x920 [ 855.307568][ T1053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.307573][ T1053] ? perf_swevent_hrtimer+0x31f/0x3e0 [ 855.307577][ T1053] ? __kasan_check_read+0x11/0x20 [ 855.307581][ T1053] ? mark_lock+0xc0/0x11e0 [ 855.307585][ T1053] ? __kasan_check_read+0x11/0x20 [ 855.307589][ T1053] ? __lock_acquire+0x8a2/0x4c30 [ 855.307593][ T1053] ? __kasan_check_read+0x11/0x20 [ 855.307597][ T1053] ? mark_lock+0xc0/0x11e0 [ 855.307602][ T1053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.307606][ T1053] ? __this_cpu_preempt_check+0x3a/0x210 [ 855.307611][ T1053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 855.307616][ T1053] ? __perf_event_header__init_id.isra.0+0x335/0x490 [ 855.307621][ T1053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 855.307626][ T1053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 855.307630][ T1053] ? perf_prepare_sample+0x829/0x1570 [ 855.307634][ T1053] ? __kasan_check_read+0x11/0x20 [ 855.307638][ T1053] ? perf_callchain+0x1c0/0x1c0 [ 855.307643][ T1053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.307648][ T1053] perf_event_output_forward+0x125/0x290 [ 855.307652][ T1053] ? perf_event_output_forward+0x125/0x290 [ 855.307657][ T1053] ? perf_prepare_sample+0x1570/0x1570 [ 855.307661][ T1053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.307666][ T1053] ? __this_cpu_preempt_check+0x3a/0x210 [ 855.307670][ T1053] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 855.307675][ T1053] ? __perf_event_account_interrupt+0x100/0x2e0 [ 855.307679][ T1053] __perf_event_overflow+0x141/0x370 [ 855.307684][ T1053] ? __kasan_check_write+0x14/0x20 [ 855.307688][ T1053] perf_swevent_hrtimer+0x279/0x3e0 [ 855.307692][ T1053] ? __perf_event_overflow+0x370/0x370 [ 855.307697][ T1053] ? find_held_lock+0x35/0x130 [ 855.307701][ T1053] ? debug_object_deactivate+0x1d9/0x320 [ 855.307705][ T1053] ? lock_downgrade+0x920/0x920 [ 855.307709][ T1053] ? rwlock_bug.part.0+0x90/0x90 [ 855.307713][ T1053] ? __hrtimer_run_queues+0x2ec/0xe40 [ 855.307717][ T1053] ? find_held_lock+0x35/0x130 [ 855.307722][ T1053] ? __hrtimer_run_queues+0x2ec/0xe40 [ 855.307726][ T1053] ? debug_object_deactivate+0x1d9/0x320 [ 855.307730][ T1053] ? lock_downgrade+0x920/0x920 [ 855.307735][ T1053] ? hrtimer_interrupt+0x13d/0x770 [ 855.307740][ T1053] __hrtimer_run_queues+0x364/0xe40 [ 855.307744][ T1053] ? __perf_event_overflow+0x370/0x370 [ 855.307748][ T1053] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 855.307753][ T1053] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 855.307758][ T1053] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 855.307762][ T1053] hrtimer_interrupt+0x314/0x770 [ 855.307766][ T1053] smp_apic_timer_interrupt+0x160/0x610 [ 855.307770][ T1053] apic_timer_interrupt+0xf/0x20 [ 855.307773][ T1053] [ 855.307778][ T1053] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 [ 855.307791][ T1053] Code: 48 c7 c0 80 f2 d2 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d 22 4a 98 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 4c 24 14 fa 65 8b 05 8d 55 c7 78 [ 855.307795][ T1053] RSP: 0018:ffff888064c0fab0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 855.307806][ T1053] RAX: 1ffffffff11a5e50 RBX: 0000000000000282 RCX: 0000000000000006 [ 855.307811][ T1053] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000282 [ 855.307817][ T1053] RBP: ffff888064c0fac0 R08: 1ffffffff14a8357 R09: fffffbfff14a8358 [ 855.307823][ T1053] R10: fffffbfff14a8357 R11: ffffffff8a541abf R12: ffff8880a07cd018 [ 855.307829][ T1053] R13: ffff88806715bd0c R14: 0000000000000282 R15: ffff8880a07cd018 [ 855.307834][ T1053] snd_seq_prioq_cell_out+0x1e3/0x350 [ 855.307838][ T1053] snd_seq_check_queue.part.0+0x1a7/0x360 [ 855.307843][ T1053] snd_seq_enqueue_event+0x1fb/0x4c0 [ 855.307848][ T1053] snd_seq_client_enqueue_event.constprop.0+0x259/0x470 [ 855.307853][ T1053] ? snd_seq_kernel_client_dispatch+0x180/0x180 [ 855.307858][ T1053] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 855.307862][ T1053] snd_seq_write+0x40b/0x740 [ 855.307866][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 855.307871][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 855.307875][ T1053] ? __vfs_write+0x22/0x110 [ 855.307879][ T1053] __vfs_write+0x8a/0x110 [ 855.307883][ T1053] ? snd_seq_kernel_client_enqueue+0x1e0/0x1e0 [ 855.307887][ T1053] vfs_write+0x268/0x5d0 [ 855.307891][ T1053] ksys_write+0x220/0x290 [ 855.307895][ T1053] ? __ia32_sys_read+0xb0/0xb0 [ 855.307899][ T1053] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 855.307903][ T1053] ? do_syscall_64+0x26/0x760 [ 855.307908][ T1053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.307912][ T1053] ? do_syscall_64+0x26/0x760 [ 855.307916][ T1053] __x64_sys_write+0x73/0xb0 [ 855.307920][ T1053] do_syscall_64+0xfa/0x760 [ 855.307924][ T1053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.307928][ T1053] RIP: 0033:0x459829 [ 855.307940][ T1053] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 855.307945][ T1053] RSP: 002b:00007f8dde449c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.307955][ T1053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 855.307961][ T1053] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000005 [ 855.307967][ T1053] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 855.307972][ T1053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8dde44a6d4 [ 855.307978][ T1053] R13: 00000000004c98c0 R14: 00000000004e0d38 R15: 00000000ffffffff [ 855.325656][ T1053] Kernel panic - not syncing: hung_task: blocked tasks [ 856.047233][ T1053] CPU: 1 PID: 1053 Comm: khungtaskd Not tainted 5.3.0-rc1-next-20190725 #51 [ 856.056137][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.066340][ T1053] Call Trace: [ 856.069658][ T1053] dump_stack+0x172/0x1f0 [ 856.074017][ T1053] panic+0x2dc/0x755 [ 856.077936][ T1053] ? add_taint.cold+0x16/0x16 [ 856.082632][ T1053] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 856.088332][ T1053] ? ___preempt_schedule+0x16/0x20 [ 856.093695][ T1053] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 856.099958][ T1053] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 856.106823][ T1053] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 856.113418][ T1053] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 856.119689][ T1053] watchdog+0xc65/0x1320 [ 856.123971][ T1053] kthread+0x361/0x430 [ 856.128076][ T1053] ? reset_hung_task_detector+0x30/0x30 [ 856.133645][ T1053] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 856.139913][ T1053] ret_from_fork+0x24/0x30 [ 856.145943][ T1053] Kernel Offset: disabled [ 856.150468][ T1053] Rebooting in 86400 seconds..