[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.899294][ T26] audit: type=1800 audit(1572409474.331:25): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.934788][ T26] audit: type=1800 audit(1572409474.331:26): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.956713][ T26] audit: type=1800 audit(1572409474.341:27): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. 2019/10/30 04:24:44 fuzzer started 2019/10/30 04:24:46 dialing manager at 10.128.0.26:38767 2019/10/30 04:24:46 syscalls: 2541 2019/10/30 04:24:46 code coverage: enabled 2019/10/30 04:24:46 comparison tracing: enabled 2019/10/30 04:24:46 extra coverage: extra coverage is not supported by the kernel 2019/10/30 04:24:46 setuid sandbox: enabled 2019/10/30 04:24:46 namespace sandbox: enabled 2019/10/30 04:24:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/30 04:24:46 fault injection: enabled 2019/10/30 04:24:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/30 04:24:46 net packet injection: enabled 2019/10/30 04:24:46 net device setup: enabled 2019/10/30 04:24:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 04:26:44 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f7, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000002400070500000015e4d1929c38025c00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006e6574656d0000004c0002000000000000000000000000000000000000000000000000000c00080000000000000000000c00050005000200000000000c000b0000000000000000000c000300000000000000000000000100687462000000020000000500000000000000050000000000000002000300000000000000000000000000000000000000000005000000000000000500000000000000020003000000000000000000000000000000000000000000050000000000000002000300000000000000000001000000000000000000"], 0xcc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 04:26:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) dup2(r1, r0) syzkaller login: [ 187.060974][ T8799] IPVS: ftp: loaded support on port[0] = 21 04:26:44 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="23020ab9"], 0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) futex(&(0x7f0000000240)=0x1, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 187.288526][ T8801] IPVS: ftp: loaded support on port[0] = 21 [ 187.314398][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 187.375338][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.395064][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.402849][ T8799] device bridge_slave_0 entered promiscuous mode [ 187.411870][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.419020][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.426856][ T8799] device bridge_slave_1 entered promiscuous mode [ 187.464763][ T8804] IPVS: ftp: loaded support on port[0] = 21 [ 187.488755][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.515526][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:26:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 187.589706][ T8801] chnl_net:caif_netlink_parms(): no params data found [ 187.606449][ T8799] team0: Port device team_slave_0 added [ 187.637342][ T8799] team0: Port device team_slave_1 added 04:26:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) [ 187.858252][ T8799] device hsr_slave_0 entered promiscuous mode [ 187.905370][ T8799] device hsr_slave_1 entered promiscuous mode [ 187.988022][ T8807] IPVS: ftp: loaded support on port[0] = 21 04:26:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3f", 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 188.030598][ T8809] IPVS: ftp: loaded support on port[0] = 21 [ 188.105872][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.114021][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.122506][ T8801] device bridge_slave_0 entered promiscuous mode [ 188.156199][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.163285][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.171578][ T8801] device bridge_slave_1 entered promiscuous mode [ 188.189010][ T8804] chnl_net:caif_netlink_parms(): no params data found [ 188.224034][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.249120][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.280066][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.281363][ T8812] IPVS: ftp: loaded support on port[0] = 21 [ 188.287302][ T8799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.287939][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.307569][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.328363][ T8801] team0: Port device team_slave_0 added [ 188.349811][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.368342][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.388353][ T8801] team0: Port device team_slave_1 added [ 188.412150][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.419851][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.428053][ T8804] device bridge_slave_0 entered promiscuous mode [ 188.435689][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.442732][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.451121][ T8804] device bridge_slave_1 entered promiscuous mode [ 188.484429][ T8804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.548862][ T8801] device hsr_slave_0 entered promiscuous mode [ 188.605697][ T8801] device hsr_slave_1 entered promiscuous mode [ 188.675185][ T8801] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.698466][ T8804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.722816][ T8804] team0: Port device team_slave_0 added [ 188.731783][ T8804] team0: Port device team_slave_1 added [ 188.809510][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 188.883625][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.891796][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.900249][ T8809] device bridge_slave_0 entered promiscuous mode [ 188.910730][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.920457][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.928445][ T8809] device bridge_slave_1 entered promiscuous mode [ 188.947135][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.956666][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 189.030290][ T8804] device hsr_slave_0 entered promiscuous mode [ 189.075669][ T8804] device hsr_slave_1 entered promiscuous mode [ 189.145092][ T8804] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.154614][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.168740][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.223568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.233724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.246815][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.271644][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.281942][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.291510][ T8807] device bridge_slave_0 entered promiscuous mode [ 189.301093][ T8809] team0: Port device team_slave_0 added [ 189.307523][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.314671][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.322808][ T8807] device bridge_slave_1 entered promiscuous mode [ 189.347711][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.356698][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.365362][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.372443][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.393294][ T8809] team0: Port device team_slave_1 added [ 189.409334][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.423875][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.433936][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.442987][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.450061][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.477944][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.519957][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 189.588434][ T8809] device hsr_slave_0 entered promiscuous mode [ 189.625363][ T8809] device hsr_slave_1 entered promiscuous mode [ 189.685232][ T8809] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.702361][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.743989][ T8807] team0: Port device team_slave_0 added [ 189.754478][ T8807] team0: Port device team_slave_1 added [ 189.791007][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.800245][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.811549][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.820034][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.908687][ T8807] device hsr_slave_0 entered promiscuous mode [ 189.955406][ T8807] device hsr_slave_1 entered promiscuous mode [ 189.995450][ T8807] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.011791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.021114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.030260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.038702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.051993][ T8799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.063513][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.073990][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.088044][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.096299][ T8812] device bridge_slave_0 entered promiscuous mode [ 190.105894][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.113108][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.121269][ T8812] device bridge_slave_1 entered promiscuous mode [ 190.129924][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.138475][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.164278][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.220376][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.231592][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.242907][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.260444][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.268821][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.289724][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.309440][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.318526][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.327607][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.334662][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.343329][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.373390][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.383962][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.392781][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.399904][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.419749][ T8804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.440744][ T8812] team0: Port device team_slave_0 added [ 190.455560][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.464720][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.490083][ T8812] team0: Port device team_slave_1 added [ 190.520021][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.528899][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.538581][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.548591][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.568655][ T8801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.584659][ T8801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.648532][ T8812] device hsr_slave_0 entered promiscuous mode [ 190.685579][ T8812] device hsr_slave_1 entered promiscuous mode [ 190.725177][ T8812] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.739660][ T8804] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.750453][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.759512][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.768024][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.776636][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.785159][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.793371][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.801615][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.855992][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.875771][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.884575][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.899888][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.907026][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.917771][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.939587][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.954375][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.963258][ T8826] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.976989][ T8826] netem: incorrect ge model size [ 190.982070][ T8826] netem: change failed [ 190.993914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.003184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.012433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.019572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.027328][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.038072][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.064232][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.091005][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 04:26:48 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="8d40420d297d", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) [ 191.107915][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.126113][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.140826][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.154551][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:26:48 executing program 0: [ 191.170952][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.183455][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.200520][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.210671][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:26:48 executing program 0: [ 191.286112][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.294484][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.310970][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.322608][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state 04:26:48 executing program 0: [ 191.330173][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.339060][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.351856][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.363068][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.370344][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.384696][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.401755][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.411416][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.426128][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:26:48 executing program 0: [ 191.438582][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.447553][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.468876][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.486826][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.513730][ T8807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 04:26:48 executing program 0: [ 191.531151][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.557292][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.572607][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 04:26:49 executing program 0: [ 191.598220][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.619061][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.628697][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.636878][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.644701][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.653493][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.662251][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.671551][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.767283][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.776423][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.786622][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.795525][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.802643][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.823329][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.832414][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.841664][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.849061][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.870216][ T8804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.889437][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.897967][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.906911][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.917213][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.933041][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.959124][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.973795][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.987869][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.003629][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.013359][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 04:26:49 executing program 1: [ 192.023486][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.034809][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.056054][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.072034][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.087308][ T8809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.102307][ T8809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.126542][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.138766][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.158069][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.245316][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.272083][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.288003][ C1] hrtimer: interrupt took 24572 ns [ 192.303493][ T8870] BPF:hdr_len not found [ 192.316689][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.325849][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.363595][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.395329][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 04:26:49 executing program 2: 04:26:49 executing program 0: [ 192.413812][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.422085][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.517777][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.531897][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.540842][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.554685][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.584657][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.601267][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.610242][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.619248][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.627862][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.636320][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.644459][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.652836][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.662203][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.686545][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.732500][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 04:26:50 executing program 4: 04:26:50 executing program 5: 04:26:50 executing program 1: 04:26:50 executing program 3: 04:26:50 executing program 2: 04:26:50 executing program 0: 04:26:50 executing program 4: 04:26:50 executing program 3: 04:26:50 executing program 4: 04:26:50 executing program 2: 04:26:50 executing program 0: 04:26:50 executing program 1: 04:26:50 executing program 3: 04:26:50 executing program 5: 04:26:50 executing program 4: 04:26:50 executing program 2: 04:26:50 executing program 1: 04:26:50 executing program 0: 04:26:50 executing program 5: 04:26:50 executing program 3: 04:26:50 executing program 4: 04:26:50 executing program 1: 04:26:50 executing program 2: 04:26:51 executing program 3: 04:26:51 executing program 0: 04:26:51 executing program 5: 04:26:51 executing program 2: 04:26:51 executing program 4: 04:26:51 executing program 3: 04:26:51 executing program 1: 04:26:51 executing program 5: 04:26:51 executing program 0: 04:26:51 executing program 4: 04:26:51 executing program 2: 04:26:51 executing program 5: 04:26:51 executing program 1: 04:26:51 executing program 3: 04:26:51 executing program 0: 04:26:51 executing program 2: 04:26:51 executing program 4: 04:26:51 executing program 3: 04:26:51 executing program 0: 04:26:51 executing program 2: 04:26:51 executing program 1: 04:26:51 executing program 5: 04:26:51 executing program 3: 04:26:51 executing program 4: 04:26:51 executing program 0: 04:26:51 executing program 2: 04:26:52 executing program 3: 04:26:52 executing program 1: 04:26:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 04:26:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e212391531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:26:52 executing program 5: 04:26:52 executing program 2: 04:26:52 executing program 3: 04:26:52 executing program 5: 04:26:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/5, 0x5}], 0x3, 0x0) 04:26:52 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000018008109e00f80ecdb4cb9040a1d65ef0b007c06e87c55a1bc000900b800069903000000050005800200812fa80005000f0063e3fb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025cc3d39e4b51e2752b4285eb3fc50ca9e33f4d6ce722f1266bbb8061400360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93450000", 0xd8}], 0x1}, 0x0) 04:26:52 executing program 3: syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x4000) 04:26:52 executing program 5: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/528], 0x15) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) stat(&(0x7f0000000380)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 04:26:52 executing program 4: r0 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f00000001c0)) mq_notify(r0, 0x0) 04:26:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000001000000000000ff02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x5c, 0x0) [ 195.060303][ T9011] IPv6: NLM_F_CREATE should be specified when creating new route 04:26:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 04:26:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="16496c5611b04d7443b42cb3338ed9ef21198fe2a427cbff9d895c9ef54e7188cd5113098f2ec66ced00b0ed0097e6dbeb4b8c83a519877cb7816e3e94ed369c710ea1f0711c8f16315d97cf5f70227defba1560e97d81f1b0cb40996adf9aafd7d36bac5334cc8001689ccc06273a2e1302687bde559fa830659021d837f902870f2212d6292809ca2355f26d94ef170f4366a41181e1e70ef39313151449fe0f4c8fd745a900a49833c644f1015d6e15037087046147ce6022", 0xfdef}], 0x1) 04:26:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0xdd5ac6fbec2a1746, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b653", 0x7) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 04:26:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b6532950", 0x9) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 04:26:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x8}) 04:26:52 executing program 1: clone(0x3102001fd1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x38a0d92) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='./file1\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0, 0x0) 04:26:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_]Sm\x98:#\"\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04m\x89\x0e4\xe6\x1d]\xb3\xd9iO=\r=\x92\x89\x16~\xf4\xf7\xf9\x00\x00\x00\x00\xe1\xff\xff\xff\xff\xff\xff\x01') 04:26:52 executing program 0: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200080, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000b28000)=0x6) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:26:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b6532950", 0x9) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 04:26:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:26:53 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 04:26:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) [ 195.771572][ T9081] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 04:26:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 04:26:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) 04:26:53 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 04:26:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b6532950", 0x9) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 04:26:53 executing program 3: 04:26:53 executing program 1: 04:26:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b6532950", 0x9) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 196.099968][ T9101] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 04:26:53 executing program 0: 04:26:53 executing program 3: 04:26:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:26:56 executing program 4: 04:26:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0x10}, {&(0x7f0000000280)=""/243}, {&(0x7f00000001c0)=""/20}, {&(0x7f0000000380)=""/124}], 0x1b2) 04:26:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0xc0189436, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) gettid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r3, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) getpeername$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='cgroup.type\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xf0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, 0x0, 0x0) 04:26:56 executing program 3: 04:26:56 executing program 0: 04:26:56 executing program 4: 04:26:56 executing program 3: 04:26:56 executing program 0: 04:26:56 executing program 4: 04:26:56 executing program 0: 04:26:56 executing program 3: 04:26:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:26:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0xc0189436, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) gettid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r3, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) getpeername$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='cgroup.type\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xf0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, 0x0, 0x0) 04:26:59 executing program 1: 04:26:59 executing program 4: 04:26:59 executing program 0: 04:26:59 executing program 3: 04:26:59 executing program 0: 04:26:59 executing program 3: 04:26:59 executing program 4: 04:26:59 executing program 1: 04:26:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0xc0189436, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) gettid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r3, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) getpeername$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='cgroup.type\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xf0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, 0x0, 0x0) 04:26:59 executing program 0: 04:27:02 executing program 1: 04:27:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:02 executing program 4: 04:27:02 executing program 3: 04:27:02 executing program 0: 04:27:02 executing program 2: 04:27:02 executing program 1: 04:27:02 executing program 3: 04:27:02 executing program 4: 04:27:02 executing program 0: 04:27:02 executing program 2: 04:27:02 executing program 4: 04:27:02 executing program 1: 04:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:05 executing program 2: 04:27:05 executing program 0: 04:27:05 executing program 3: 04:27:05 executing program 1: 04:27:05 executing program 4: 04:27:05 executing program 4: 04:27:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp6\x00\xf2\x9f9\x9f\x11\x9fS\xc5\xffL\xe5\x06W\x92\x12b\x1cc%\xf9S\xe9u\x9f\x9d_\xfbd}\xec\xd6\x14.\x86\xc9\"\x81*\x8d>/\xcb\xa7\xc2\x99\t\x13\x15\"\x95\x91^\xc7\x8c\xa5\xeb\x86CiV\xady\xe5\x84\x83\xac\x04\x04O\xda\xf0\x0f') preadv(r0, &(0x7f0000001c80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, 0x0) 04:27:05 executing program 1: 04:27:05 executing program 2: 04:27:05 executing program 0: 04:27:05 executing program 1: 04:27:05 executing program 0: 04:27:05 executing program 4: 04:27:05 executing program 2: 04:27:05 executing program 1: 04:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:05 executing program 3: 04:27:05 executing program 4: 04:27:05 executing program 3: 04:27:06 executing program 1: 04:27:06 executing program 0: 04:27:06 executing program 2: 04:27:06 executing program 4: 04:27:06 executing program 2: 04:27:06 executing program 3: 04:27:06 executing program 1: 04:27:06 executing program 0: 04:27:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:06 executing program 2: 04:27:06 executing program 3: 04:27:06 executing program 1: 04:27:06 executing program 4: 04:27:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) 04:27:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x105, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 04:27:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed14e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd45dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775487b2b2f710c2b03b5b2461179f5f90bba001b50c09a6218a8106df2858ec973328e5a2c078a3fe3b52020203517e65ee74e82ba80a0fa881e689f7615baf78f0859fc000060d6a0b61193d4a1cb622431d42fee5e212391531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fcf567bf50600a2434362f56de8c859fa668b046005fc1e41eccbab4c0e594193f4e4e4b7966c8bb", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:27:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x800) 04:27:06 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 04:27:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x21, 0x2, 0xc}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000002c0), &(0x7f0000000340), 0x4000}, 0x20) [ 209.404183][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:06 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) openat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x40) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f00000001c0), 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x181000, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) [ 209.469204][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.521525][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.582880][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.641949][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.693622][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.716154][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.787752][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.865624][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.889487][ T9305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:07 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000000), 0x125) 04:27:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2a) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xb, 0xffff, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100ae0e00000003000000000000040500060000000000a8ee000000000004000020b25162934c4a0fa17f2aef9bfc000000000000000121"], 0x39}}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 04:27:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='d'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="cf"], 0x1) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x400000000000170, 0x0, 0x0) 04:27:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) clone(0x10007fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20100000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000010000000000000002008000000007f000000000000000000000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000008000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000006000000000000007f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)={'filter\x00'}, &(0x7f0000000000)=0x54) 04:27:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, 0x0) 04:27:07 executing program 2: 04:27:09 executing program 4: 04:27:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:27:10 executing program 3: 04:27:10 executing program 2: 04:27:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, 0x0) 04:27:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:10 executing program 4: 04:27:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) dup3(r0, 0xffffffffffffffff, 0x82c307e7768d226a) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 04:27:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(&(0x7f0000000840)='./bus/file0\x00', 0x391180, 0x140) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8", 0xeb, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0xa, 0x1, 0x0) r13 = socket(0x1000000010, 0x400000400080803, 0x0) r14 = dup(r13) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r15}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20000, r16}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xff10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:27:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{}, {0x6, 0x0, 0x4, 0x50000}]}) 04:27:11 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) dup3(r2, r1, 0x0) signalfd4(r0, &(0x7f0000000300)={0x7}, 0x8, 0x40800) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000200)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="32abdd9e02000000127b20000034ed97a46fe2c4ae6d338df04cc26832b217fd511a5d15aa1b292fd272856533ca298ad667cf21f35153e2521cbc9d5eaa81a8b89c42e201d227777441e24d90197f16880dd4e0bd1225efbca34bd78f69fd0d2a77873e6adb08903309be3f30d07b8b0fd48f2ea5a9c710fd965bc00870a3708afe3922806c6b0400da1e680f49420b9ca3aab1ad1ad41fcfdc7890ec685d67447757b9bbb382a7ee85f25545a6a20b41bcdd6837235333e9f80870b2e765d4f19c1066e9cfd2e5f80dc8d94acd8a37a85f73d538cc72f654"], 0xd9) lseek(r4, 0x0, 0x3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x8000}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0xa2) r5 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="9094a8e27096fd3b3353cb8690032a1388e3c3e62fe22f5a94b372737a94d9fb22beb9ecabe7883a12b29e350df0fe1179367084c1410b1c122c4b76a70039e8369becbb14bb8292dd09a16a3a08bb606062e5515a5222d89abec3f9cf2cca7e0ee0d493923456ac8ccb94bba72b1e9da9cfc50312c8488a16d9d65295008bba89ae071ee0629a0384c0da6a94d429992e9d92a489dae2e6b20df95cf1a4611ffd8d0b09bded1c627bf9ac2b48e69a8c873046c0de0dde143fada1394860d004c0687791c0ce2a2d4bb1acf36003723109b28f51e5a981", 0xd7, 0xfffffffffffffff9) keyctl$describe(0x6, r5, &(0x7f00000009c0)=""/165, 0xa5) recvmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/80, 0x50}, 0x87cb}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/27, 0x1b}], 0x1, &(0x7f0000000600)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f00000007c0)}, 0xfffffffb}, {{&(0x7f0000002dc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001000)=""/97, 0x61}, 0x5}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001080)=""/251, 0xfb}, {0x0}, {&(0x7f0000001200)=""/177, 0xb1}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/172, 0xac}], 0x5}, 0x8}, {{&(0x7f0000002400)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000280)=""/93, 0x5d}], 0x3, &(0x7f0000002600)=""/206, 0xce}, 0x2}, {{&(0x7f0000002700)=@in6, 0x80, &(0x7f0000000240)=[{&(0x7f0000002780)=""/144, 0x90}, {&(0x7f0000002840)=""/29, 0x1d}, {&(0x7f0000002d00)=""/192, 0xc0}, {&(0x7f0000002940)=""/50, 0x32}], 0x4, &(0x7f00000029c0)=""/21, 0x15}, 0xffffffff}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000003d80)=""/105, 0x69}, 0x20}], 0x8, 0x20, 0x0) r6 = dup3(0xffffffffffffffff, r3, 0xc0000) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x3, 0x1, &(0x7f0000002c40)=""/175, &(0x7f0000000340)=""/1, &(0x7f0000001180)=""/78, 0x10002}) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000440)={0x80, 0x5, [0x2, 0x6, 0x8, 0x9, 0xfff], 0xc34}) pipe2(&(0x7f0000000780), 0x80000) r7 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="941c0a3b0ad4ae3c722c4da8e72ab715", 0xe7}], 0x1, &(0x7f0000000100), 0x0, 0x40000}], 0x1, 0x0) r8 = accept4$packet(r7, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14, 0x400) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000840)=0x20) 04:27:11 executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0xffffff4c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x3) 04:27:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) 04:27:11 executing program 2: 04:27:11 executing program 1: r0 = socket(0x2, 0xc003, 0x6) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10) write(r0, &(0x7f0000000040)="9e3eb3900603b73725c7419aab4230e8864fabe4f27242c9a88b86fab7ca2730619556ae0b655533", 0x28) sendto(r0, &(0x7f0000000180)="6861fe261e6f64378b5e05cdf304b826010000000000000000000000e2597291bd508928c1fcdf82fa627475b78f00"/60, 0x3c, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000280)="f8893e9d34ba751218d141ed7382a05dd4857d0e4b1fdfd4b09f4f8a", 0x1c) 04:27:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(&(0x7f0000000840)='./bus/file0\x00', 0x391180, 0x140) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8", 0xeb, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0xa, 0x1, 0x0) r13 = socket(0x1000000010, 0x400000400080803, 0x0) r14 = dup(r13) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r15}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20000, r16}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xff10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:27:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:12 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x84000) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) shutdown(0xffffffffffffffff, 0x0) 04:27:12 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) prlimit64(r0, 0xe, &(0x7f00000003c0)={0x9, 0x200000000000009}, 0x0) open(0x0, 0x0, 0x161) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) r4 = dup(r3) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000300)={0x25ac, 0x1d1, 0x1, 0x7, 0x6, 0x80000000}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x4}, 0xfffffd5d) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x200000000, 0xadd, 0x0, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socket$inet(0x10, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="bc25a839e607e03b8215a8717129c945bacdfcce87e68d", @ANYBLOB, @ANYBLOB="2c677294b8705f69643d", @ANYRESDEC=0x0, @ANYBLOB="1264723ee939176d71802076e22f9b5a361c628476d8ce7ba0065afe60f1e59cf0f8d651a8a9c51027c5d5819bd5a2420c0d64c6a902f78e4863756e3e226c362b4603632b2888360f5ad6a7edee5da05dfbb396e4fdf588b51c9e07bcc7f98dc150c0bd7d1165c30433386d29d576a0485a252f91036cf0fa3f42e15e2b53a17537b0988675dfefc59359c403782cbd237f4bd193c10e1a6af752368013d2dfb084aae95e0d0e3e5172796dd3e943ab871cfd2975cbbd56b23dac5f308f"]) mount$fuse(0x0, 0x0, 0x0, 0x68, 0x0) 04:27:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) poll(&(0x7f0000000340)=[{r1, 0x3404}, {r0, 0x81}, {r2}, {r3, 0x10}, {r0, 0x8000}, {r4}, {r0, 0x40}, {r0}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1001}], 0xa, 0x5) io_setup(0x0, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clock_adjtime(0x2, &(0x7f00000006c0)={0x0, 0x3f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x88, 0x2, 0x0, 0x0, 0x200, 0x5, 0x4, 0x80000001, 0x0, 0x401, 0x5, 0x0, 0x7fffffff, 0x9dc8, 0x1000, 0x80000000, 0x9, 0x0, 0x6}) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000940)="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") dup3(r7, r5, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"]) write$P9_RATTACH(r5, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r5, 0x4, 0x40800) 04:27:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 04:27:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(&(0x7f0000000840)='./bus/file0\x00', 0x391180, 0x140) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8", 0xeb, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0xa, 0x1, 0x0) r13 = socket(0x1000000010, 0x400000400080803, 0x0) r14 = dup(r13) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r15}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20000, r16}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xff10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 215.637757][ T9399] syz-executor.0 (9399) used greatest stack depth: 22824 bytes left 04:27:13 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) dup3(r2, r1, 0x0) signalfd4(r0, &(0x7f0000000300)={0x7}, 0x8, 0x40800) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000200)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="32abdd9e02000000127b20000034ed97a46fe2c4ae6d338df04cc26832b217fd511a5d15aa1b292fd272856533ca298ad667cf21f35153e2521cbc9d5eaa81a8b89c42e201d227777441e24d90197f16880dd4e0bd1225efbca34bd78f69fd0d2a77873e6adb08903309be3f30d07b8b0fd48f2ea5a9c710fd965bc00870a3708afe3922806c6b0400da1e680f49420b9ca3aab1ad1ad41fcfdc7890ec685d67447757b9bbb382a7ee85f25545a6a20b41bcdd6837235333e9f80870b2e765d4f19c1066e9cfd2e5f80dc8d94acd8a37a85f73d538cc72f654"], 0xd9) lseek(r4, 0x0, 0x3) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x8000}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0xa2) r5 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="9094a8e27096fd3b3353cb8690032a1388e3c3e62fe22f5a94b372737a94d9fb22beb9ecabe7883a12b29e350df0fe1179367084c1410b1c122c4b76a70039e8369becbb14bb8292dd09a16a3a08bb606062e5515a5222d89abec3f9cf2cca7e0ee0d493923456ac8ccb94bba72b1e9da9cfc50312c8488a16d9d65295008bba89ae071ee0629a0384c0da6a94d429992e9d92a489dae2e6b20df95cf1a4611ffd8d0b09bded1c627bf9ac2b48e69a8c873046c0de0dde143fada1394860d004c0687791c0ce2a2d4bb1acf36003723109b28f51e5a981", 0xd7, 0xfffffffffffffff9) keyctl$describe(0x6, r5, &(0x7f00000009c0)=""/165, 0xa5) recvmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/80, 0x50}, 0x87cb}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/27, 0x1b}], 0x1, &(0x7f0000000600)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f00000007c0)}, 0xfffffffb}, {{&(0x7f0000002dc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001000)=""/97, 0x61}, 0x5}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001080)=""/251, 0xfb}, {0x0}, {&(0x7f0000001200)=""/177, 0xb1}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/172, 0xac}], 0x5}, 0x8}, {{&(0x7f0000002400)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000280)=""/93, 0x5d}], 0x3, &(0x7f0000002600)=""/206, 0xce}, 0x2}, {{&(0x7f0000002700)=@in6, 0x80, &(0x7f0000000240)=[{&(0x7f0000002780)=""/144, 0x90}, {&(0x7f0000002840)=""/29, 0x1d}, {&(0x7f0000002d00)=""/192, 0xc0}, {&(0x7f0000002940)=""/50, 0x32}], 0x4, &(0x7f00000029c0)=""/21, 0x15}, 0xffffffff}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000003d80)=""/105, 0x69}, 0x20}], 0x8, 0x20, 0x0) r6 = dup3(0xffffffffffffffff, r3, 0xc0000) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x3, 0x1, &(0x7f0000002c40)=""/175, &(0x7f0000000340)=""/1, &(0x7f0000001180)=""/78, 0x10002}) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000440)={0x80, 0x5, [0x2, 0x6, 0x8, 0x9, 0xfff], 0xc34}) pipe2(&(0x7f0000000780), 0x80000) r7 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="941c0a3b0ad4ae3c722c4da8e72ab715", 0xe7}], 0x1, &(0x7f0000000100), 0x0, 0x40000}], 0x1, 0x0) r8 = accept4$packet(r7, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14, 0x400) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000840)=0x20) 04:27:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/120, 0x78}], 0x1, 0x6c000000) 04:27:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10410, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) 04:27:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 04:27:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$dupfd(r0, 0x0, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:13 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 04:27:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 216.284420][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 216.284434][ T26] audit: type=1804 audit(1572409633.711:31): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir058660721/syzkaller.kDV8te/36/file0/file0" dev="sda1" ino=16658 res=1 04:27:13 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 04:27:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(&(0x7f0000000840)='./bus/file0\x00', 0x391180, 0x140) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8", 0xeb, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0xa, 0x1, 0x0) r13 = socket(0x1000000010, 0x400000400080803, 0x0) r14 = dup(r13) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r15}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20000, r16}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xff10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:27:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={[{@uid={'uid', 0x3d, r3}}]}) 04:27:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) read(r0, &(0x7f0000000100)=""/40, 0x28) [ 216.767057][ T9512] hfsplus: uid requires an argument [ 216.941561][ T9512] hfsplus: unable to parse mount options 04:27:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) dup3(r0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 04:27:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x200}]) 04:27:14 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x84000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) shutdown(0xffffffffffffffff, 0x0) 04:27:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={[{@uid={'uid', 0x3d, r3}}]}) 04:27:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)) [ 217.401320][ T9531] Dev loop2: unable to read RDB block 1 [ 217.413995][ T9531] loop2: unable to read partition table [ 217.425312][ T9531] loop2: partition table beyond EOD, truncated 04:27:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$dupfd(r0, 0x0, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00\xbck\xd6X\xaf\xf8\x87\xa5\xa4\xeb\xb7D\x14\xbaa@\x00\xc4_\xbb\x0f\x9d\f\nYc8\xc1\x88\xccI\xc3\xe4,\"\\\x95\xc9.\xde\xbf\x83\x17u\xf5\xf4o\xa4u\x83\x00\xd0\xc5\xb9QF\xacU\x95\xcb\xab\x9bh\xf4\xb5\xb03\t\xa8\xd6\xe0\xce\xd9R\xc4+\xea\xcb\x1d\xb4FG\x8aO\x9b\x86u\xc7\x83{\xf1\xdc\x8b\xd3\x89\xad\xadk[\xfaA\xbcA\x7f\xed\xaf\x87\xf6!\x06\x1a\x0e\xdc:\xddiG\xc1a\xa0\x98f\xfb\x9f\xe1|\x83\xff\xc8\'B\xd3\xeb\xd3^)U\x9994\xe0\xda\x94{\xd2#\xe7`&x\xd8b\xd2\xb6C\xe5\x97\xe7\xd7\xd3\x16\xd4Ur-\xec;\xf8', 0x4084, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) 04:27:14 executing program 1: r0 = gettid() capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)) [ 217.465794][ T9531] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 217.484871][ T9546] hfsplus: uid requires an argument [ 217.500441][ T9546] hfsplus: unable to parse mount options 04:27:15 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) prlimit64(r0, 0xe, &(0x7f00000003c0)={0x9, 0x200000000000009}, 0x0) open(0x0, 0x0, 0x161) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r4 = dup(r3) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000300)={0x25ac, 0x1d1, 0x1, 0x7, 0x6, 0x80000000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x100000001) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x200000000, 0xadd, 0x0, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socket$inet(0x10, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="bc25a839e607e03b8215a8717129c945bacdfcce87e68d", @ANYBLOB, @ANYBLOB="2c677294b8705f69", @ANYRESDEC=0x0, @ANYBLOB="1264723ee939176d71802076e22f9b5a361c628476d8ce7ba0065afe60f1e59cf0f8d651a8a9c51027c5d5819bd5a2420c0d64c6a902f78e4863756e3e226c362b4603632b2888360f5ad6a7edee5da05dfbb396e4fdf588b51c9e07bcc7f98dc150c0bd7d1165c30433386d29d576a0485a252f91036cf0fa3f42e15e2b53a17537b0988675dfefc59359c403782cbd237f4bd193c10e1a6af752368013d2dfb084aae95e0d0e3e5172796dd3e943ab871cfd2975cbbd56b23dac5f308f"]) mount$fuse(0x0, 0x0, 0x0, 0x68, 0x0) [ 217.612665][ T9559] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 04:27:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x200}]) 04:27:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={[{@uid={'uid', 0x3d, r3}}]}) 04:27:15 executing program 1: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 217.876254][ T9580] hfsplus: uid requires an argument 04:27:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00\xbck\xd6X\xaf\xf8\x87\xa5\xa4\xeb\xb7D\x14\xbaa@\x00\xc4_\xbb\x0f\x9d\f\nYc8\xc1\x88\xccI\xc3\xe4,\"\\\x95\xc9.\xde\xbf\x83\x17u\xf5\xf4o\xa4u\x83\x00\xd0\xc5\xb9QF\xacU\x95\xcb\xab\x9bh\xf4\xb5\xb03\t\xa8\xd6\xe0\xce\xd9R\xc4+\xea\xcb\x1d\xb4FG\x8aO\x9b\x86u\xc7\x83{\xf1\xdc\x8b\xd3\x89\xad\xadk[\xfaA\xbcA\x7f\xed\xaf\x87\xf6!\x06\x1a\x0e\xdc:\xddiG\xc1a\xa0\x98f\xfb\x9f\xe1|\x83\xff\xc8\'B\xd3\xeb\xd3^)U\x9994\xe0\xda\x94{\xd2#\xe7`&x\xd8b\xd2\xb6C\xe5\x97\xe7\xd7\xd3\x16\xd4Ur-\xec;\xf8', 0x4084, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) [ 217.937691][ T9580] hfsplus: unable to parse mount options [ 217.963495][ T9588] fuse: Unknown parameter '%9;qq)E·' 04:27:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:27:15 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "bc"}, 0x2) 04:27:15 executing program 4: [ 218.255963][ T9590] Dev loop2: unable to read RDB block 1 [ 218.315129][ T9590] loop2: unable to read partition table 04:27:15 executing program 4: [ 218.382981][ T9590] loop2: partition table beyond EOD, truncated [ 218.435057][ T9590] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 04:27:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$dupfd(r0, 0x0, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:15 executing program 1: 04:27:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00\xbck\xd6X\xaf\xf8\x87\xa5\xa4\xeb\xb7D\x14\xbaa@\x00\xc4_\xbb\x0f\x9d\f\nYc8\xc1\x88\xccI\xc3\xe4,\"\\\x95\xc9.\xde\xbf\x83\x17u\xf5\xf4o\xa4u\x83\x00\xd0\xc5\xb9QF\xacU\x95\xcb\xab\x9bh\xf4\xb5\xb03\t\xa8\xd6\xe0\xce\xd9R\xc4+\xea\xcb\x1d\xb4FG\x8aO\x9b\x86u\xc7\x83{\xf1\xdc\x8b\xd3\x89\xad\xadk[\xfaA\xbcA\x7f\xed\xaf\x87\xf6!\x06\x1a\x0e\xdc:\xddiG\xc1a\xa0\x98f\xfb\x9f\xe1|\x83\xff\xc8\'B\xd3\xeb\xd3^)U\x9994\xe0\xda\x94{\xd2#\xe7`&x\xd8b\xd2\xb6C\xe5\x97\xe7\xd7\xd3\x16\xd4Ur-\xec;\xf8', 0x4084, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) 04:27:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:27:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x200}]) 04:27:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:27:16 executing program 4: 04:27:16 executing program 0: 04:27:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280)=[r2, r3, 0xffffffffffffffff], 0x40000000000000e6) [ 218.809369][ T9628] Dev loop2: unable to read RDB block 1 [ 218.828519][ T9628] loop2: unable to read partition table 04:27:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:27:16 executing program 0: [ 218.851243][ T9628] loop2: partition table beyond EOD, truncated [ 218.884773][ T9628] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 04:27:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00\xbck\xd6X\xaf\xf8\x87\xa5\xa4\xeb\xb7D\x14\xbaa@\x00\xc4_\xbb\x0f\x9d\f\nYc8\xc1\x88\xccI\xc3\xe4,\"\\\x95\xc9.\xde\xbf\x83\x17u\xf5\xf4o\xa4u\x83\x00\xd0\xc5\xb9QF\xacU\x95\xcb\xab\x9bh\xf4\xb5\xb03\t\xa8\xd6\xe0\xce\xd9R\xc4+\xea\xcb\x1d\xb4FG\x8aO\x9b\x86u\xc7\x83{\xf1\xdc\x8b\xd3\x89\xad\xadk[\xfaA\xbcA\x7f\xed\xaf\x87\xf6!\x06\x1a\x0e\xdc:\xddiG\xc1a\xa0\x98f\xfb\x9f\xe1|\x83\xff\xc8\'B\xd3\xeb\xd3^)U\x9994\xe0\xda\x94{\xd2#\xe7`&x\xd8b\xd2\xb6C\xe5\x97\xe7\xd7\xd3\x16\xd4Ur-\xec;\xf8', 0x4084, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) [ 219.137523][ T9648] ================================================================== [ 219.145835][ T9648] BUG: KASAN: null-ptr-deref in io_wq_cancel_all+0x28/0x2a0 [ 219.153124][ T9648] Write of size 8 at addr 0000000000000004 by task syz-executor.4/9648 [ 219.161360][ T9648] [ 219.163785][ T9648] CPU: 1 PID: 9648 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 219.172717][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.182796][ T9648] Call Trace: 04:27:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:27:16 executing program 0: 04:27:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="4552a94174da099a1f1e0d94fe0e7a32d0028b220adf3416ac508493d7efd10141d055f601306dd99157506b0bd8c3511877f85bc79b32500da7b939e36813bc57455682c5060f82da08c0f20fe6dfc9dd5b8d6102601bf701983fbfa9ddf3a6d4db34042121fac775ad65dcfad99c32f1f616c9aad97dc8f4ed0a0003aa5bc2f354fe238ec711d5fad299bb681d2bfb6538b858199ca1b759e48badf16e5a3b609c21fa241c31e2e986c22fe8be379878d54c008c47ea78e5970823114622e480fe803db50680cf23049c7fd8afad219faa37d98a7bafe3a6513fc3d8161bf0253c1e692d6413b0121fbd7f25697f774e1d18642cbadf9922ba0224250338e76f36acc626283a721de5155592f2879d449b36766e62cb57cc2d4719f90fab2a62cf1faf2765957d2ac96a028ccce0ba105a217ee304891706543956040e47ac48cf7ad52df236ecfad6dbdd4bd5ebff4c9b5e184509a9dd6259987c4fc619b4f35700d8e5e563b484266d1eb13d09a2532afa3e29eb09906439d0323805bf627621abe2078f7dee5f810e75e16e34c42cd086e3684f245e5b488ae6aee6c35d7641e0a97950c2c607b858faee1d7796119c725c8fa2a6d0e026f1a78ef7c9820bc8ac4d684e3b12ab3ce9de1aa919f3ba7be4c0f9935dba7fe2237b8cab1ac2d5d17fdfa7a24cd72f71b0420628a1aa560cdb19a95f177bfb333f25cc3140ed", 0x200}]) 04:27:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:27:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00\xbck\xd6X\xaf\xf8\x87\xa5\xa4\xeb\xb7D\x14\xbaa@\x00\xc4_\xbb\x0f\x9d\f\nYc8\xc1\x88\xccI\xc3\xe4,\"\\\x95\xc9.\xde\xbf\x83\x17u\xf5\xf4o\xa4u\x83\x00\xd0\xc5\xb9QF\xacU\x95\xcb\xab\x9bh\xf4\xb5\xb03\t\xa8\xd6\xe0\xce\xd9R\xc4+\xea\xcb\x1d\xb4FG\x8aO\x9b\x86u\xc7\x83{\xf1\xdc\x8b\xd3\x89\xad\xadk[\xfaA\xbcA\x7f\xed\xaf\x87\xf6!\x06\x1a\x0e\xdc:\xddiG\xc1a\xa0\x98f\xfb\x9f\xe1|\x83\xff\xc8\'B\xd3\xeb\xd3^)U\x9994\xe0\xda\x94{\xd2#\xe7`&x\xd8b\xd2\xb6C\xe5\x97\xe7\xd7\xd3\x16\xd4Ur-\xec;\xf8', 0x4084, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) [ 219.186098][ T9648] dump_stack+0x172/0x1f0 [ 219.190441][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.195405][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.200445][ T9648] __kasan_report.cold+0x5/0x41 [ 219.205298][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.210333][ T9648] kasan_report+0x12/0x20 [ 219.214671][ T9648] check_memory_region+0x134/0x1a0 [ 219.219881][ T9648] __kasan_check_write+0x14/0x20 [ 219.224827][ T9648] io_wq_cancel_all+0x28/0x2a0 [ 219.229603][ T9648] io_uring_flush+0x35a/0x4e0 [ 219.234361][ T9648] ? exit_sem+0x9a4/0x1d89 [ 219.238920][ T9648] ? io_wake_function+0x260/0x260 [ 219.238941][ T9648] ? exit_files+0x7b/0xb0 [ 219.238957][ T9648] ? finish_wait+0x260/0x260 [ 219.238969][ T9648] ? exit_files+0x7b/0xb0 [ 219.238986][ T9648] ? io_wake_function+0x260/0x260 [ 219.239004][ T9648] filp_close+0xbd/0x170 [ 219.239016][ T9648] put_files_struct+0x1d7/0x2f0 [ 219.239032][ T9648] exit_files+0x83/0xb0 [ 219.275567][ T9648] do_exit+0x8d2/0x2e60 [ 219.279760][ T9648] ? mm_update_next_owner+0x640/0x640 04:27:16 executing program 0: [ 219.285132][ T9648] ? lock_downgrade+0x920/0x920 [ 219.289984][ T9648] ? _raw_spin_unlock_irq+0x23/0x80 [ 219.295184][ T9648] ? get_signal+0x392/0x24f0 [ 219.299780][ T9648] ? _raw_spin_unlock_irq+0x23/0x80 [ 219.305077][ T9648] do_group_exit+0x135/0x360 [ 219.309686][ T9648] get_signal+0x47c/0x24f0 [ 219.314109][ T9648] ? lock_downgrade+0x920/0x920 [ 219.318971][ T9648] do_signal+0x87/0x1700 [ 219.323216][ T9648] ? __kasan_check_read+0x11/0x20 [ 219.328238][ T9648] ? _copy_to_user+0x118/0x160 [ 219.333204][ T9648] ? setup_sigcontext+0x7d0/0x7d0 [ 219.338240][ T9648] ? exit_to_usermode_loop+0x43/0x380 [ 219.343618][ T9648] ? do_syscall_64+0x65f/0x760 [ 219.348383][ T9648] ? exit_to_usermode_loop+0x43/0x380 [ 219.353757][ T9648] ? lockdep_hardirqs_on+0x421/0x5e0 [ 219.359067][ T9648] ? trace_hardirqs_on+0x67/0x240 [ 219.364097][ T9648] exit_to_usermode_loop+0x286/0x380 [ 219.369828][ T9648] do_syscall_64+0x65f/0x760 [ 219.374444][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.380329][ T9648] RIP: 0033:0x459f49 [ 219.384316][ T9648] Code: Bad RIP value. [ 219.388375][ T9648] RSP: 002b:00007f1e2dabdcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.396790][ T9648] RAX: 0000000000000001 RBX: 000000000075c078 RCX: 0000000000459f49 [ 219.404754][ T9648] RDX: 00000000004cddf8 RSI: 0000000000000081 RDI: 000000000075c07c [ 219.412726][ T9648] RBP: 000000000075c070 R08: 0000000000000009 R09: 0000000000000000 [ 219.420693][ T9648] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075c07c [ 219.429021][ T9648] R13: 00007fff4086ea9f R14: 00007f1e2dabe9c0 R15: 000000000075c07c [ 219.437176][ T9648] ================================================================== [ 219.445226][ T9648] Disabling lock debugging due to kernel taint [ 219.455543][ T9648] Kernel panic - not syncing: panic_on_warn set ... [ 219.462160][ T9648] CPU: 0 PID: 9648 Comm: syz-executor.4 Tainted: G B 5.4.0-rc5-next-20191029 #0 [ 219.472470][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.482520][ T9648] Call Trace: [ 219.485804][ T9648] dump_stack+0x172/0x1f0 [ 219.490137][ T9648] panic+0x2e3/0x75c [ 219.494028][ T9648] ? add_taint.cold+0x16/0x16 [ 219.498704][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.502319][ T9658] kobject: 'loop2' (00000000438b0904): kobject_uevent_env [ 219.503639][ T9648] ? preempt_schedule+0x4b/0x60 [ 219.510849][ T9658] kobject: 'loop2' (00000000438b0904): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 219.515617][ T9648] ? ___preempt_schedule+0x16/0x18 [ 219.515630][ T9648] ? trace_hardirqs_on+0x5e/0x240 [ 219.515643][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.515655][ T9648] end_report+0x47/0x4f [ 219.515666][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.515677][ T9648] __kasan_report.cold+0xe/0x41 [ 219.515687][ T9648] ? io_wq_cancel_all+0x28/0x2a0 [ 219.515699][ T9648] kasan_report+0x12/0x20 [ 219.515717][ T9648] check_memory_region+0x134/0x1a0 [ 219.569272][ T9648] __kasan_check_write+0x14/0x20 [ 219.574188][ T9648] io_wq_cancel_all+0x28/0x2a0 [ 219.578927][ T9648] io_uring_flush+0x35a/0x4e0 [ 219.583599][ T9648] ? exit_sem+0x9a4/0x1d89 [ 219.588004][ T9648] ? io_wake_function+0x260/0x260 [ 219.593001][ T9648] ? exit_files+0x7b/0xb0 [ 219.597305][ T9648] ? finish_wait+0x260/0x260 [ 219.601870][ T9648] ? exit_files+0x7b/0xb0 [ 219.606190][ T9648] ? io_wake_function+0x260/0x260 [ 219.611301][ T9648] filp_close+0xbd/0x170 [ 219.615536][ T9648] put_files_struct+0x1d7/0x2f0 [ 219.620371][ T9648] exit_files+0x83/0xb0 [ 219.624511][ T9648] do_exit+0x8d2/0x2e60 [ 219.628648][ T9648] ? mm_update_next_owner+0x640/0x640 [ 219.633998][ T9648] ? lock_downgrade+0x920/0x920 [ 219.638830][ T9648] ? _raw_spin_unlock_irq+0x23/0x80 [ 219.643999][ T9648] ? get_signal+0x392/0x24f0 [ 219.648576][ T9648] ? _raw_spin_unlock_irq+0x23/0x80 [ 219.653754][ T9648] do_group_exit+0x135/0x360 [ 219.658329][ T9648] get_signal+0x47c/0x24f0 [ 219.662720][ T9648] ? lock_downgrade+0x920/0x920 [ 219.667566][ T9648] do_signal+0x87/0x1700 [ 219.671786][ T9648] ? __kasan_check_read+0x11/0x20 [ 219.676792][ T9648] ? _copy_to_user+0x118/0x160 [ 219.681534][ T9648] ? setup_sigcontext+0x7d0/0x7d0 [ 219.686557][ T9648] ? exit_to_usermode_loop+0x43/0x380 [ 219.691929][ T9648] ? do_syscall_64+0x65f/0x760 [ 219.696716][ T9648] ? exit_to_usermode_loop+0x43/0x380 [ 219.702076][ T9648] ? lockdep_hardirqs_on+0x421/0x5e0 [ 219.707368][ T9648] ? trace_hardirqs_on+0x67/0x240 [ 219.712387][ T9648] exit_to_usermode_loop+0x286/0x380 [ 219.717652][ T9648] do_syscall_64+0x65f/0x760 [ 219.722222][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.728103][ T9648] RIP: 0033:0x459f49 [ 219.731977][ T9648] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.751560][ T9648] RSP: 002b:00007f1e2dabdcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.760562][ T9648] RAX: 0000000000000001 RBX: 000000000075c078 RCX: 0000000000459f49 [ 219.768509][ T9648] RDX: 00000000004cddf8 RSI: 0000000000000081 RDI: 000000000075c07c [ 219.776458][ T9648] RBP: 000000000075c070 R08: 0000000000000009 R09: 0000000000000000 [ 219.784489][ T9648] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075c07c [ 219.792450][ T9648] R13: 00007fff4086ea9f R14: 00007f1e2dabe9c0 R15: 000000000075c07c [ 219.803359][ T9648] Kernel Offset: disabled [ 219.807693][ T9648] Rebooting in 86400 seconds..