Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts. 2022/09/13 20:36:12 fuzzer started 2022/09/13 20:36:13 dialing manager at 10.128.0.163:37075 2022/09/13 20:36:13 syscalls: 3525 2022/09/13 20:36:13 code coverage: enabled 2022/09/13 20:36:13 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2022/09/13 20:36:13 extra coverage: extra coverage is not supported by the kernel 2022/09/13 20:36:13 delay kcov mmap: mmap returned an invalid pointer 2022/09/13 20:36:13 setuid sandbox: enabled 2022/09/13 20:36:13 namespace sandbox: enabled 2022/09/13 20:36:13 Android sandbox: /sys/fs/selinux/policy does not exist 2022/09/13 20:36:13 fault injection: enabled 2022/09/13 20:36:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/09/13 20:36:13 net packet injection: enabled 2022/09/13 20:36:13 net device setup: enabled 2022/09/13 20:36:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 20:36:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 20:36:13 USB emulation: /dev/raw-gadget does not exist 2022/09/13 20:36:13 hci packet injection: enabled 2022/09/13 20:36:13 wifi device emulation: kernel 4.17 required (have 4.14.292-syzkaller) 2022/09/13 20:36:13 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2022/09/13 20:36:13 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 20:36:13 fetching corpus: 48, signal 38767/42491 (executing program) 2022/09/13 20:36:14 fetching corpus: 98, signal 67549/72823 (executing program) 2022/09/13 20:36:15 fetching corpus: 148, signal 85683/92454 (executing program) 2022/09/13 20:36:15 fetching corpus: 197, signal 100582/108805 (executing program) 2022/09/13 20:36:16 fetching corpus: 247, signal 116113/125628 (executing program) 2022/09/13 20:36:16 fetching corpus: 297, signal 127950/138795 (executing program) 2022/09/13 20:36:16 fetching corpus: 347, signal 134833/147034 (executing program) 2022/09/13 20:36:16 fetching corpus: 397, signal 142372/155861 (executing program) 2022/09/13 20:36:17 fetching corpus: 447, signal 150657/165321 (executing program) 2022/09/13 20:36:17 fetching corpus: 497, signal 158098/173937 (executing program) 2022/09/13 20:36:17 fetching corpus: 547, signal 164206/181212 (executing program) 2022/09/13 20:36:18 fetching corpus: 597, signal 171358/189449 (executing program) 2022/09/13 20:36:18 fetching corpus: 647, signal 177419/196557 (executing program) 2022/09/13 20:36:18 fetching corpus: 697, signal 184646/204773 (executing program) 2022/09/13 20:36:18 fetching corpus: 747, signal 191367/212459 (executing program) 2022/09/13 20:36:19 fetching corpus: 797, signal 198251/220280 (executing program) 2022/09/13 20:36:19 fetching corpus: 847, signal 203172/226186 (executing program) 2022/09/13 20:36:20 fetching corpus: 895, signal 207001/231035 (executing program) 2022/09/13 20:36:20 fetching corpus: 945, signal 212072/236995 (executing program) 2022/09/13 20:36:21 fetching corpus: 993, signal 215669/241530 (executing program) 2022/09/13 20:36:21 fetching corpus: 1043, signal 219501/246293 (executing program) 2022/09/13 20:36:21 fetching corpus: 1092, signal 223815/251479 (executing program) 2022/09/13 20:36:22 fetching corpus: 1142, signal 227815/256354 (executing program) 2022/09/13 20:36:22 fetching corpus: 1192, signal 231714/261120 (executing program) 2022/09/13 20:36:23 fetching corpus: 1240, signal 236230/266319 (executing program) 2022/09/13 20:36:23 fetching corpus: 1286, signal 239770/270643 (executing program) 2022/09/13 20:36:23 fetching corpus: 1333, signal 243549/275143 (executing program) 2022/09/13 20:36:24 fetching corpus: 1380, signal 246708/279131 (executing program) 2022/09/13 20:36:24 fetching corpus: 1430, signal 250662/283778 (executing program) 2022/09/13 20:36:24 fetching corpus: 1475, signal 253738/287594 (executing program) 2022/09/13 20:36:24 fetching corpus: 1523, signal 256607/291207 (executing program) 2022/09/13 20:36:25 fetching corpus: 1573, signal 260536/295791 (executing program) 2022/09/13 20:36:25 fetching corpus: 1621, signal 264275/300094 (executing program) 2022/09/13 20:36:25 fetching corpus: 1670, signal 266551/303123 (executing program) 2022/09/13 20:36:26 fetching corpus: 1720, signal 269511/306757 (executing program) 2022/09/13 20:36:26 fetching corpus: 1770, signal 271503/309535 (executing program) 2022/09/13 20:36:26 fetching corpus: 1817, signal 273448/312265 (executing program) 2022/09/13 20:36:27 fetching corpus: 1867, signal 275039/314639 (executing program) 2022/09/13 20:36:27 fetching corpus: 1917, signal 277419/317677 (executing program) 2022/09/13 20:36:27 fetching corpus: 1964, signal 280247/321152 (executing program) 2022/09/13 20:36:28 fetching corpus: 2013, signal 283267/324703 (executing program) 2022/09/13 20:36:28 fetching corpus: 2063, signal 286575/328538 (executing program) 2022/09/13 20:36:28 fetching corpus: 2113, signal 288930/331505 (executing program) 2022/09/13 20:36:28 fetching corpus: 2162, signal 290992/334237 (executing program) 2022/09/13 20:36:29 fetching corpus: 2212, signal 293349/337146 (executing program) 2022/09/13 20:36:29 fetching corpus: 2261, signal 295191/339643 (executing program) 2022/09/13 20:36:29 fetching corpus: 2311, signal 297703/342679 (executing program) 2022/09/13 20:36:30 fetching corpus: 2361, signal 299905/345386 (executing program) 2022/09/13 20:36:30 fetching corpus: 2409, signal 301352/347543 (executing program) 2022/09/13 20:36:30 fetching corpus: 2457, signal 303233/350010 (executing program) 2022/09/13 20:36:30 fetching corpus: 2506, signal 305056/352435 (executing program) 2022/09/13 20:36:31 fetching corpus: 2555, signal 307432/355286 (executing program) 2022/09/13 20:36:31 fetching corpus: 2603, signal 309033/357485 (executing program) 2022/09/13 20:36:32 fetching corpus: 2651, signal 311342/360228 (executing program) 2022/09/13 20:36:32 fetching corpus: 2691, signal 312244/361826 (executing program) 2022/09/13 20:36:33 fetching corpus: 2741, signal 313660/363851 (executing program) 2022/09/13 20:36:33 fetching corpus: 2788, signal 316183/366768 (executing program) 2022/09/13 20:36:33 fetching corpus: 2837, signal 318657/369596 (executing program) 2022/09/13 20:36:34 fetching corpus: 2886, signal 320556/371945 (executing program) 2022/09/13 20:36:34 fetching corpus: 2935, signal 322674/374467 (executing program) 2022/09/13 20:36:35 fetching corpus: 2984, signal 324801/376974 (executing program) 2022/09/13 20:36:35 fetching corpus: 3032, signal 326977/379520 (executing program) 2022/09/13 20:36:35 fetching corpus: 3078, signal 328540/381576 (executing program) 2022/09/13 20:36:36 fetching corpus: 3119, signal 330102/383655 (executing program) 2022/09/13 20:36:36 fetching corpus: 3168, signal 331959/385857 (executing program) 2022/09/13 20:36:36 fetching corpus: 3218, signal 333422/387779 (executing program) 2022/09/13 20:36:36 fetching corpus: 3266, signal 334891/389683 (executing program) 2022/09/13 20:36:37 fetching corpus: 3316, signal 336287/391481 (executing program) 2022/09/13 20:36:37 fetching corpus: 3366, signal 337641/393342 (executing program) 2022/09/13 20:36:37 fetching corpus: 3415, signal 339772/395750 (executing program) 2022/09/13 20:36:38 fetching corpus: 3465, signal 340907/397374 (executing program) 2022/09/13 20:36:38 fetching corpus: 3514, signal 342287/399156 (executing program) 2022/09/13 20:36:38 fetching corpus: 3561, signal 343651/400970 (executing program) 2022/09/13 20:36:38 fetching corpus: 3610, signal 345155/402897 (executing program) 2022/09/13 20:36:39 fetching corpus: 3659, signal 346847/404904 (executing program) 2022/09/13 20:36:39 fetching corpus: 3708, signal 348127/406649 (executing program) 2022/09/13 20:36:39 fetching corpus: 3758, signal 349074/408093 (executing program) 2022/09/13 20:36:40 fetching corpus: 3807, signal 350251/409668 (executing program) 2022/09/13 20:36:40 fetching corpus: 3857, signal 351962/411613 (executing program) 2022/09/13 20:36:41 fetching corpus: 3905, signal 353471/413418 (executing program) 2022/09/13 20:36:41 fetching corpus: 3953, signal 355164/415393 (executing program) 2022/09/13 20:36:41 fetching corpus: 3999, signal 356779/417321 (executing program) 2022/09/13 20:36:41 fetching corpus: 4049, signal 358359/419164 (executing program) 2022/09/13 20:36:42 fetching corpus: 4098, signal 359545/420743 (executing program) 2022/09/13 20:36:42 fetching corpus: 4147, signal 360831/422401 (executing program) 2022/09/13 20:36:42 fetching corpus: 4196, signal 362106/424002 (executing program) 2022/09/13 20:36:42 fetching corpus: 4246, signal 363250/425462 (executing program) 2022/09/13 20:36:43 fetching corpus: 4294, signal 364809/427185 (executing program) 2022/09/13 20:36:43 fetching corpus: 4340, signal 365711/428511 (executing program) 2022/09/13 20:36:43 fetching corpus: 4388, signal 366998/430085 (executing program) 2022/09/13 20:36:44 fetching corpus: 4433, signal 368530/431799 (executing program) 2022/09/13 20:36:44 fetching corpus: 4481, signal 369842/433407 (executing program) 2022/09/13 20:36:45 fetching corpus: 4530, signal 371141/435011 (executing program) 2022/09/13 20:36:45 fetching corpus: 4578, signal 372464/436563 (executing program) 2022/09/13 20:36:45 fetching corpus: 4628, signal 373840/438095 (executing program) 2022/09/13 20:36:45 fetching corpus: 4677, signal 375019/439527 (executing program) 2022/09/13 20:36:46 fetching corpus: 4727, signal 376173/440942 (executing program) 2022/09/13 20:36:46 fetching corpus: 4774, signal 382389/445672 (executing program) 2022/09/13 20:36:46 fetching corpus: 4821, signal 383909/447282 (executing program) 2022/09/13 20:36:47 fetching corpus: 4871, signal 385434/448960 (executing program) 2022/09/13 20:36:47 fetching corpus: 4918, signal 386550/450317 (executing program) 2022/09/13 20:36:48 fetching corpus: 4967, signal 387670/451623 (executing program) 2022/09/13 20:36:48 fetching corpus: 5015, signal 388735/452907 (executing program) 2022/09/13 20:36:48 fetching corpus: 5065, signal 389807/454166 (executing program) 2022/09/13 20:36:49 fetching corpus: 5115, signal 390975/455505 (executing program) 2022/09/13 20:36:49 fetching corpus: 5165, signal 392405/456999 (executing program) 2022/09/13 20:36:49 fetching corpus: 5212, signal 394685/458994 (executing program) 2022/09/13 20:36:50 fetching corpus: 5261, signal 395829/460316 (executing program) 2022/09/13 20:36:50 fetching corpus: 5310, signal 397042/461695 (executing program) 2022/09/13 20:36:50 fetching corpus: 5360, signal 398364/463095 (executing program) 2022/09/13 20:36:51 fetching corpus: 5408, signal 399459/464336 (executing program) 2022/09/13 20:36:51 fetching corpus: 5458, signal 400453/465533 (executing program) 2022/09/13 20:36:51 fetching corpus: 5508, signal 401635/466811 (executing program) 2022/09/13 20:36:52 fetching corpus: 5558, signal 402846/468105 (executing program) 2022/09/13 20:36:52 fetching corpus: 5606, signal 404221/469552 (executing program) 2022/09/13 20:36:52 fetching corpus: 5656, signal 405781/471058 (executing program) 2022/09/13 20:36:53 fetching corpus: 5705, signal 406989/472339 (executing program) 2022/09/13 20:36:54 fetching corpus: 5754, signal 407692/473299 (executing program) 2022/09/13 20:36:54 fetching corpus: 5804, signal 408584/474386 (executing program) 2022/09/13 20:36:54 fetching corpus: 5854, signal 409679/475536 (executing program) 2022/09/13 20:36:55 fetching corpus: 5904, signal 410840/476769 (executing program) 2022/09/13 20:36:55 fetching corpus: 5954, signal 411883/477902 (executing program) 2022/09/13 20:36:56 fetching corpus: 6004, signal 412754/478925 (executing program) 2022/09/13 20:36:56 fetching corpus: 6054, signal 413823/480075 (executing program) 2022/09/13 20:36:56 fetching corpus: 6104, signal 414745/481091 (executing program) 2022/09/13 20:36:56 fetching corpus: 6154, signal 415485/482042 (executing program) 2022/09/13 20:36:57 fetching corpus: 6204, signal 416606/483211 (executing program) 2022/09/13 20:36:57 fetching corpus: 6254, signal 417872/484389 (executing program) 2022/09/13 20:36:58 fetching corpus: 6303, signal 418558/485244 (executing program) 2022/09/13 20:36:58 fetching corpus: 6350, signal 419307/486157 (executing program) 2022/09/13 20:36:59 fetching corpus: 6400, signal 420495/487249 (executing program) 2022/09/13 20:36:59 fetching corpus: 6448, signal 421283/488180 (executing program) 2022/09/13 20:36:59 fetching corpus: 6498, signal 422064/489130 (executing program) 2022/09/13 20:37:00 fetching corpus: 6547, signal 422898/490057 (executing program) 2022/09/13 20:37:00 fetching corpus: 6596, signal 423697/490966 (executing program) 2022/09/13 20:37:01 fetching corpus: 6646, signal 424432/491847 (executing program) 2022/09/13 20:37:01 fetching corpus: 6696, signal 425530/492898 (executing program) 2022/09/13 20:37:01 fetching corpus: 6746, signal 426501/493919 (executing program) 2022/09/13 20:37:02 fetching corpus: 6796, signal 427550/494882 (executing program) 2022/09/13 20:37:02 fetching corpus: 6844, signal 428319/495757 (executing program) 2022/09/13 20:37:03 fetching corpus: 6894, signal 429333/496746 (executing program) 2022/09/13 20:37:03 fetching corpus: 6944, signal 430272/497669 (executing program) 2022/09/13 20:37:03 fetching corpus: 6993, signal 431095/498540 (executing program) 2022/09/13 20:37:04 fetching corpus: 7043, signal 432175/499557 (executing program) 2022/09/13 20:37:04 fetching corpus: 7093, signal 432951/500380 (executing program) 2022/09/13 20:37:05 fetching corpus: 7142, signal 433913/501282 (executing program) 2022/09/13 20:37:05 fetching corpus: 7192, signal 434765/502182 (executing program) 2022/09/13 20:37:05 fetching corpus: 7242, signal 435696/503125 (executing program) 2022/09/13 20:37:06 fetching corpus: 7290, signal 436414/503908 (executing program) 2022/09/13 20:37:06 fetching corpus: 7340, signal 437505/504873 (executing program) 2022/09/13 20:37:06 fetching corpus: 7390, signal 438648/505855 (executing program) 2022/09/13 20:37:07 fetching corpus: 7440, signal 439813/506842 (executing program) 2022/09/13 20:37:07 fetching corpus: 7489, signal 440640/507647 (executing program) 2022/09/13 20:37:07 fetching corpus: 7538, signal 441515/508469 (executing program) 2022/09/13 20:37:08 fetching corpus: 7587, signal 442431/509340 (executing program) 2022/09/13 20:37:08 fetching corpus: 7636, signal 443601/510301 (executing program) 2022/09/13 20:37:08 fetching corpus: 7686, signal 444383/511072 (executing program) 2022/09/13 20:37:09 fetching corpus: 7736, signal 445189/511841 (executing program) 2022/09/13 20:37:09 fetching corpus: 7786, signal 445956/512606 (executing program) 2022/09/13 20:37:09 fetching corpus: 7833, signal 446673/513332 (executing program) 2022/09/13 20:37:10 fetching corpus: 7883, signal 447426/514055 (executing program) 2022/09/13 20:37:10 fetching corpus: 7928, signal 447969/514730 (executing program) 2022/09/13 20:37:11 fetching corpus: 7976, signal 449087/515624 (executing program) 2022/09/13 20:37:11 fetching corpus: 8025, signal 449864/516349 (executing program) 2022/09/13 20:37:11 fetching corpus: 8075, signal 450917/517185 (executing program) 2022/09/13 20:37:11 fetching corpus: 8124, signal 451767/517948 (executing program) 2022/09/13 20:37:12 fetching corpus: 8173, signal 452585/518706 (executing program) 2022/09/13 20:37:12 fetching corpus: 8223, signal 453337/519398 (executing program) 2022/09/13 20:37:12 fetching corpus: 8271, signal 454148/520114 (executing program) 2022/09/13 20:37:12 fetching corpus: 8321, signal 455046/520882 (executing program) 2022/09/13 20:37:13 fetching corpus: 8370, signal 455894/521588 (executing program) 2022/09/13 20:37:13 fetching corpus: 8419, signal 456618/522239 (executing program) 2022/09/13 20:37:13 fetching corpus: 8469, signal 457358/522905 (executing program) 2022/09/13 20:37:13 fetching corpus: 8519, signal 458161/523571 (executing program) 2022/09/13 20:37:14 fetching corpus: 8569, signal 458902/524213 (executing program) 2022/09/13 20:37:14 fetching corpus: 8619, signal 459587/524844 (executing program) 2022/09/13 20:37:14 fetching corpus: 8669, signal 460395/525490 (executing program) 2022/09/13 20:37:14 fetching corpus: 8718, signal 461199/526150 (executing program) 2022/09/13 20:37:14 fetching corpus: 8767, signal 461988/526872 (executing program) 2022/09/13 20:37:15 fetching corpus: 8816, signal 462717/527488 (executing program) 2022/09/13 20:37:15 fetching corpus: 8866, signal 463441/528124 (executing program) 2022/09/13 20:37:15 fetching corpus: 8915, signal 464493/528852 (executing program) 2022/09/13 20:37:15 fetching corpus: 8964, signal 465170/529443 (executing program) 2022/09/13 20:37:16 fetching corpus: 9013, signal 465689/529985 (executing program) 2022/09/13 20:37:16 fetching corpus: 9063, signal 466416/530552 (executing program) 2022/09/13 20:37:16 fetching corpus: 9109, signal 467219/531183 (executing program) 2022/09/13 20:37:17 fetching corpus: 9157, signal 468121/531818 (executing program) 2022/09/13 20:37:17 fetching corpus: 9207, signal 468860/532404 (executing program) 2022/09/13 20:37:17 fetching corpus: 9257, signal 469517/532989 (executing program) 2022/09/13 20:37:17 fetching corpus: 9307, signal 470018/533484 (executing program) 2022/09/13 20:37:18 fetching corpus: 9357, signal 470740/534042 (executing program) 2022/09/13 20:37:18 fetching corpus: 9405, signal 471278/534529 (executing program) 2022/09/13 20:37:18 fetching corpus: 9453, signal 472144/535130 (executing program) 2022/09/13 20:37:18 fetching corpus: 9503, signal 472965/535703 (executing program) 2022/09/13 20:37:18 fetching corpus: 9553, signal 473598/536195 (executing program) 2022/09/13 20:37:19 fetching corpus: 9603, signal 474390/536766 (executing program) 2022/09/13 20:37:19 fetching corpus: 9653, signal 474975/537267 (executing program) 2022/09/13 20:37:19 fetching corpus: 9703, signal 475568/537771 (executing program) 2022/09/13 20:37:19 fetching corpus: 9752, signal 476185/538282 (executing program) 2022/09/13 20:37:20 fetching corpus: 9801, signal 476875/538779 (executing program) 2022/09/13 20:37:20 fetching corpus: 9849, signal 477637/539323 (executing program) 2022/09/13 20:37:20 fetching corpus: 9898, signal 478293/539818 (executing program) 2022/09/13 20:37:20 fetching corpus: 9948, signal 479042/540347 (executing program) 2022/09/13 20:37:20 fetching corpus: 9998, signal 479840/540817 (executing program) 2022/09/13 20:37:21 fetching corpus: 10047, signal 480786/541366 (executing program) 2022/09/13 20:37:21 fetching corpus: 10097, signal 481543/541881 (executing program) 2022/09/13 20:37:21 fetching corpus: 10146, signal 482036/542335 (executing program) 2022/09/13 20:37:21 fetching corpus: 10196, signal 482503/542755 (executing program) 2022/09/13 20:37:22 fetching corpus: 10246, signal 483160/543221 (executing program) 2022/09/13 20:37:22 fetching corpus: 10296, signal 484366/543767 (executing program) 2022/09/13 20:37:22 fetching corpus: 10346, signal 485226/544267 (executing program) 2022/09/13 20:37:22 fetching corpus: 10395, signal 485963/544726 (executing program) 2022/09/13 20:37:23 fetching corpus: 10445, signal 486408/545115 (executing program) 2022/09/13 20:37:23 fetching corpus: 10495, signal 487196/545615 (executing program) 2022/09/13 20:37:23 fetching corpus: 10545, signal 487919/546071 (executing program) 2022/09/13 20:37:23 fetching corpus: 10595, signal 488579/546472 (executing program) 2022/09/13 20:37:24 fetching corpus: 10645, signal 490079/547036 (executing program) 2022/09/13 20:37:24 fetching corpus: 10695, signal 490920/547486 (executing program) 2022/09/13 20:37:24 fetching corpus: 10744, signal 491399/547888 (executing program) 2022/09/13 20:37:24 fetching corpus: 10793, signal 491923/548268 (executing program) 2022/09/13 20:37:25 fetching corpus: 10843, signal 492726/548695 (executing program) 2022/09/13 20:37:25 fetching corpus: 10893, signal 493488/549069 (executing program) 2022/09/13 20:37:25 fetching corpus: 10943, signal 494251/549477 (executing program) 2022/09/13 20:37:26 fetching corpus: 10993, signal 495695/549981 (executing program) 2022/09/13 20:37:26 fetching corpus: 11043, signal 496294/550369 (executing program) 2022/09/13 20:37:26 fetching corpus: 11093, signal 497105/550743 (executing program) 2022/09/13 20:37:27 fetching corpus: 11143, signal 497729/551113 (executing program) 2022/09/13 20:37:27 fetching corpus: 11193, signal 498258/551469 (executing program) 2022/09/13 20:37:27 fetching corpus: 11242, signal 498841/551828 (executing program) 2022/09/13 20:37:27 fetching corpus: 11291, signal 499280/552135 (executing program) 2022/09/13 20:37:28 fetching corpus: 11340, signal 499914/552520 (executing program) 2022/09/13 20:37:28 fetching corpus: 11390, signal 500775/552924 (executing program) 2022/09/13 20:37:28 fetching corpus: 11440, signal 501504/553284 (executing program) 2022/09/13 20:37:29 fetching corpus: 11490, signal 502456/553657 (executing program) 2022/09/13 20:37:29 fetching corpus: 11538, signal 503095/554007 (executing program) 2022/09/13 20:37:29 fetching corpus: 11588, signal 503759/554335 (executing program) 2022/09/13 20:37:29 fetching corpus: 11638, signal 504587/554671 (executing program) 2022/09/13 20:37:30 fetching corpus: 11686, signal 505193/555011 (executing program) 2022/09/13 20:37:30 fetching corpus: 11735, signal 505758/555318 (executing program) 2022/09/13 20:37:30 fetching corpus: 11784, signal 506270/555615 (executing program) 2022/09/13 20:37:30 fetching corpus: 11834, signal 506979/555897 (executing program) 2022/09/13 20:37:30 fetching corpus: 11884, signal 507572/556224 (executing program) 2022/09/13 20:37:31 fetching corpus: 11934, signal 508058/556490 (executing program) 2022/09/13 20:37:31 fetching corpus: 11983, signal 508709/556785 (executing program) 2022/09/13 20:37:31 fetching corpus: 12032, signal 509284/557045 (executing program) 2022/09/13 20:37:31 fetching corpus: 12079, signal 509843/557360 (executing program) 2022/09/13 20:37:32 fetching corpus: 12129, signal 510403/557608 (executing program) 2022/09/13 20:37:32 fetching corpus: 12179, signal 511059/557867 (executing program) 2022/09/13 20:37:32 fetching corpus: 12228, signal 511665/558144 (executing program) 2022/09/13 20:37:32 fetching corpus: 12276, signal 512354/558394 (executing program) 2022/09/13 20:37:33 fetching corpus: 12324, signal 512982/558677 (executing program) 2022/09/13 20:37:33 fetching corpus: 12373, signal 513461/558895 (executing program) 2022/09/13 20:37:33 fetching corpus: 12422, signal 514294/559166 (executing program) 2022/09/13 20:37:33 fetching corpus: 12472, signal 514814/559388 (executing program) 2022/09/13 20:37:34 fetching corpus: 12520, signal 515180/559603 (executing program) 2022/09/13 20:37:34 fetching corpus: 12569, signal 515690/559828 (executing program) 2022/09/13 20:37:34 fetching corpus: 12619, signal 516146/560047 (executing program) 2022/09/13 20:37:34 fetching corpus: 12668, signal 516670/560290 (executing program) 2022/09/13 20:37:34 fetching corpus: 12718, signal 517276/560481 (executing program) 2022/09/13 20:37:35 fetching corpus: 12768, signal 517909/560701 (executing program) 2022/09/13 20:37:35 fetching corpus: 12817, signal 518447/560921 (executing program) 2022/09/13 20:37:35 fetching corpus: 12864, signal 519037/561130 (executing program) 2022/09/13 20:37:36 fetching corpus: 12914, signal 519461/561329 (executing program) 2022/09/13 20:37:36 fetching corpus: 12962, signal 519983/561522 (executing program) 2022/09/13 20:37:36 fetching corpus: 13012, signal 521032/561737 (executing program) 2022/09/13 20:37:37 fetching corpus: 13062, signal 521842/561956 (executing program) 2022/09/13 20:37:37 fetching corpus: 13112, signal 522341/562146 (executing program) 2022/09/13 20:37:37 fetching corpus: 13162, signal 524024/562389 (executing program) 2022/09/13 20:37:37 fetching corpus: 13211, signal 524646/562581 (executing program) 2022/09/13 20:37:37 fetching corpus: 13261, signal 525073/562744 (executing program) 2022/09/13 20:37:38 fetching corpus: 13311, signal 525562/562907 (executing program) 2022/09/13 20:37:38 fetching corpus: 13360, signal 526087/563066 (executing program) 2022/09/13 20:37:38 fetching corpus: 13410, signal 526520/563201 (executing program) 2022/09/13 20:37:38 fetching corpus: 13459, signal 527113/563367 (executing program) 2022/09/13 20:37:39 fetching corpus: 13508, signal 527563/563511 (executing program) 2022/09/13 20:37:39 fetching corpus: 13556, signal 528051/563650 (executing program) 2022/09/13 20:37:39 fetching corpus: 13605, signal 528606/563811 (executing program) 2022/09/13 20:37:39 fetching corpus: 13654, signal 529056/563966 (executing program) 2022/09/13 20:37:40 fetching corpus: 13703, signal 529665/564107 (executing program) 2022/09/13 20:37:40 fetching corpus: 13753, signal 530272/564246 (executing program) 2022/09/13 20:37:40 fetching corpus: 13802, signal 530762/564380 (executing program) 2022/09/13 20:37:40 fetching corpus: 13852, signal 531354/564385 (executing program) 2022/09/13 20:37:40 fetching corpus: 13902, signal 531901/564385 (executing program) 2022/09/13 20:37:41 fetching corpus: 13952, signal 532496/564420 (executing program) 2022/09/13 20:37:41 fetching corpus: 14002, signal 533145/564424 (executing program) 2022/09/13 20:37:42 fetching corpus: 14051, signal 533740/564424 (executing program) 2022/09/13 20:37:42 fetching corpus: 14101, signal 534346/564424 (executing program) 2022/09/13 20:37:42 fetching corpus: 14150, signal 534728/564424 (executing program) 2022/09/13 20:37:42 fetching corpus: 14200, signal 535153/564424 (executing program) 2022/09/13 20:37:42 fetching corpus: 14250, signal 535735/564443 (executing program) 2022/09/13 20:37:43 fetching corpus: 14299, signal 536292/564443 (executing program) 2022/09/13 20:37:43 fetching corpus: 14349, signal 536962/564444 (executing program) 2022/09/13 20:37:43 fetching corpus: 14399, signal 537437/564444 (executing program) 2022/09/13 20:37:43 fetching corpus: 14448, signal 537923/564444 (executing program) 2022/09/13 20:37:44 fetching corpus: 14498, signal 538439/564487 (executing program) 2022/09/13 20:37:44 fetching corpus: 14547, signal 538945/564500 (executing program) 2022/09/13 20:37:44 fetching corpus: 14597, signal 539415/564500 (executing program) 2022/09/13 20:37:44 fetching corpus: 14646, signal 539799/564531 (executing program) 2022/09/13 20:37:45 fetching corpus: 14696, signal 540240/564531 (executing program) 2022/09/13 20:37:45 fetching corpus: 14745, signal 541008/564531 (executing program) 2022/09/13 20:37:45 fetching corpus: 14795, signal 541438/564531 (executing program) 2022/09/13 20:37:45 fetching corpus: 14844, signal 542439/564531 (executing program) 2022/09/13 20:37:46 fetching corpus: 14893, signal 542992/564547 (executing program) 2022/09/13 20:37:46 fetching corpus: 14942, signal 543530/564574 (executing program) 2022/09/13 20:37:46 fetching corpus: 14992, signal 544060/564576 (executing program) 2022/09/13 20:37:47 fetching corpus: 15039, signal 544686/564576 (executing program) 2022/09/13 20:37:47 fetching corpus: 15087, signal 545101/564618 (executing program) 2022/09/13 20:37:47 fetching corpus: 15135, signal 545525/564632 (executing program) 2022/09/13 20:37:47 fetching corpus: 15185, signal 546087/564632 (executing program) 2022/09/13 20:37:47 fetching corpus: 15233, signal 546542/564642 (executing program) 2022/09/13 20:37:48 fetching corpus: 15283, signal 546972/564642 (executing program) 2022/09/13 20:37:48 fetching corpus: 15333, signal 547476/564642 (executing program) 2022/09/13 20:37:48 fetching corpus: 15383, signal 547954/564655 (executing program) 2022/09/13 20:37:48 fetching corpus: 15432, signal 548465/564698 (executing program) 2022/09/13 20:37:49 fetching corpus: 15482, signal 549090/564706 (executing program) 2022/09/13 20:37:49 fetching corpus: 15532, signal 549495/564707 (executing program) 2022/09/13 20:37:49 fetching corpus: 15581, signal 550006/564707 (executing program) 2022/09/13 20:37:49 fetching corpus: 15628, signal 550589/564716 (executing program) 2022/09/13 20:37:49 fetching corpus: 15678, signal 551013/564716 (executing program) 2022/09/13 20:37:49 fetching corpus: 15728, signal 551362/564716 (executing program) 2022/09/13 20:37:49 fetching corpus: 15778, signal 552004/564716 (executing program) 2022/09/13 20:37:50 fetching corpus: 15828, signal 552541/564757 (executing program) 2022/09/13 20:37:50 fetching corpus: 15877, signal 552920/564806 (executing program) 2022/09/13 20:37:50 fetching corpus: 15927, signal 553409/564806 (executing program) 2022/09/13 20:37:50 fetching corpus: 15977, signal 553847/564806 (executing program) 2022/09/13 20:37:51 fetching corpus: 16027, signal 554301/564806 (executing program) 2022/09/13 20:37:51 fetching corpus: 16077, signal 554693/564806 (executing program) 2022/09/13 20:37:51 fetching corpus: 16078, signal 554719/564806 (executing program) 2022/09/13 20:37:51 fetching corpus: 16078, signal 554719/564806 (executing program) 2022/09/13 20:37:53 starting 6 fuzzer processes 20:37:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)={0x94, 0x7}) 20:37:53 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x9, 0x200000000, 0x0, 0xffffffffffffffff], 0x0, 0x600}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="bad104ecba2000ec660f3a098e0068c30f01ca0f09360f0fc41db879058ee867660fc429000f221366b9800000c00f326635000800000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="66ba410066b8f06266ef0f350f97cfc4e1b054220f005084c4c2fd25ace9521e69700fc7aa0c000000c74424004387bf71c7442402fdffffffc7442406000000000f011424660f3565f4", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000032000/0x2000)=nil}) 20:37:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 20:37:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x800000075f, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 20:38:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0xe0}) 20:38:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 20:38:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0xe0}) 20:38:03 executing program 2: io_setup(0x40, &(0x7f0000001280)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 20:38:03 executing program 4: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) [ 139.085799] hrtimer: interrupt took 43597 ns [ 139.105110] pit: kvm: requested 4190 ns i8254 timer period limited to 500000 ns 20:38:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)={0x94, 0x7}) 20:38:03 executing program 3: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000600)=ANY=[@ANYBLOB="03000000000000000000000003000000000000000000000008000000000001000100008000000000000000000000000000000000000000004000000000000000000000000000000008000000000000000900000000000000070000000000000002000900000003000000000000000000000009000000010001000000000000000000000000000000000000000000003ed8ea2152000000544fc7d38e0050eda49298844dca357931a3acf99d581f1865510daeb8d9539a5dd772060cd49ef3e3d7c6c5d40d1bd3bb10fbdfdd392ca53031dc13d33dfc70e74b45d662565de8ab0a561b39aceb8da70d37ae1660871494e4cbb73acbff7f7ee5d8116fe693222d05deb895edb228bae4463d59fcf993475850154208cb7316c3ee8c2f00d267f5bb0a86a64fbf38cbb2bf8b3ab1c871a025189c33753c9a8d3ca996a5ed3b1b9e9b6a2765b1482a8050a47f3d279cb914b7b51f0463973d00ef68586005cc008000000000000086db08cc"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7, 0x0, 0x9, 0x200000000, 0x0, 0xffffffffffffffff], 0x0, 0x600}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="bad104ecba2000ec660f3a098e0068c30f01ca0f09360f0fc41db879058ee867660fc429000f221366b9800000c00f326635000800000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="66ba410066b8f06266ef0f350f97cfc4e1b054220f005084c4c2fd25ace9521e69700fc7aa0c000000c74424004387bf71c7442402fdffffffc7442406000000000f011424660f3565f4", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000032000/0x2000)=nil}) 20:38:03 executing program 4: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 2: io_setup(0x40, &(0x7f0000001280)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 20:38:03 executing program 3: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 20:38:03 executing program 0: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) 20:38:03 executing program 2: io_setup(0x40, &(0x7f0000001280)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 20:38:03 executing program 3: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:03 executing program 0: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) [ 139.529262] pit: kvm: requested 4190 ns i8254 timer period limited to 500000 ns 20:38:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:03 executing program 0: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) read$FUSE(r2, &(0x7f0000006bc0)={0x2020}, 0x2020) 20:38:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb17}, 0x14}}, 0x0) 20:38:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb17}, 0x14}}, 0x0) 20:38:04 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) 20:38:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 20:38:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb17}, 0x14}}, 0x0) 20:38:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) r2 = dup2(r1, r1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000100)) 20:38:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb17}, 0x14}}, 0x0) 20:38:04 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 20:38:04 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:04 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 20:38:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 20:38:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:06 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:38:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x98) 20:38:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x98) 20:38:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x98) 20:38:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x98) 20:38:10 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null]}, 0x40) 20:38:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xfff, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@lazytime}, {@grpid}, {@i_version}, {@noquota}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'fuseblk\x00'}}]}, 0x0) chdir(&(0x7f0000000540)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, &(0x7f00000004c0)='fuseblk\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x3, 0x20, 0xff, 0x737, 0x7fff, 0x3ff, 0xcda}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 20:38:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null]}, 0x40) 20:38:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null]}, 0x40) 20:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 20:38:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null]}, 0x40) 20:38:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2097e, 0x0) write$nbd(r0, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f007a5f56d3adffee05000000000000002fdbede50100000000000000bafbd0ff9d0100110000bb02f6b725e7baedc7fdcb80000000600000000000003f00001500000100000092a30000004000000b463b42ec00"}, 0x68) 20:38:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) [ 146.815003] dlm: no locking on control device 20:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 20:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2097e, 0x0) write$nbd(r0, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f007a5f56d3adffee05000000000000002fdbede50100000000000000bafbd0ff9d0100110000bb02f6b725e7baedc7fdcb80000000600000000000003f00001500000100000092a30000004000000b463b42ec00"}, 0x68) 20:38:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) 20:38:11 executing program 5: mlockall(0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:38:11 executing program 0: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) [ 147.270622] dlm: no locking on control device 20:38:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2097e, 0x0) write$nbd(r0, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f007a5f56d3adffee05000000000000002fdbede50100000000000000bafbd0ff9d0100110000bb02f6b725e7baedc7fdcb80000000600000000000003f00001500000100000092a30000004000000b463b42ec00"}, 0x68) 20:38:11 executing program 0: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) [ 147.391505] dlm: no locking on control device 20:38:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2097e, 0x0) write$nbd(r0, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f007a5f56d3adffee05000000000000002fdbede50100000000000000bafbd0ff9d0100110000bb02f6b725e7baedc7fdcb80000000600000000000003f00001500000100000092a30000004000000b463b42ec00"}, 0x68) 20:38:11 executing program 0: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 147.489091] dlm: no locking on control device 20:38:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:12 executing program 5: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:12 executing program 0: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) 20:38:12 executing program 5: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) 20:38:12 executing program 5: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:21 executing program 2: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 20:38:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x4) 20:38:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="3c75c2015e8724b5a4c586f2ae924b27", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000100)="29d37d9afc868937ec04921f7bb7a6f496a889442b79b73d6338e781424f3259e6f6ebc3b16d8d2ca024a1a7f599e5849c31ac5154ba261593fca442bbfd8ea2dd38513debccbb4ddb6020652ccbb6f1e5af3b506c9c5776622d145d2ff8faf3", 0x60}, {0x0}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 20:38:21 executing program 5: r0 = syz_clone(0x8080000, &(0x7f0000001780)="3f06a75297aff2c8a2d5e46b52b2da1bcccba12b0b1845fa5a30e30e6da9603db1423f", 0x23, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) capset(&(0x7f0000001900)={0x20071026, r0}, &(0x7f0000001940)={0x5, 0xfffffffa, 0x3, 0x0, 0x692af790, 0x102}) migrate_pages(r0, 0x2, &(0x7f0000000000)=0xc19, &(0x7f0000000040)=0x10001) 20:38:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.sectors_recursive\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYRES16], 0xda00) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x4000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000400)=0x2000008) close(r3) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 20:38:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x4) 20:38:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x4) [ 157.420410] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 20:38:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x0, 'freezer'}]}, 0x9) 20:38:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.sectors_recursive\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYRES16], 0xda00) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x4000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000400)=0x2000008) close(r3) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 20:38:21 executing program 2: socket$inet6(0xa, 0x1, 0x1ffbd8b4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001880)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7, 0xcd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x20044005) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0xe40}, {&(0x7f0000001880)=""/181, 0xb5}], 0x2}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x4c, r4, 0x1, 0x4, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 20:38:21 executing program 5: r0 = syz_clone(0x8080000, &(0x7f0000001780)="3f06a75297aff2c8a2d5e46b52b2da1bcccba12b0b1845fa5a30e30e6da9603db1423f", 0x23, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) capset(&(0x7f0000001900)={0x20071026, r0}, &(0x7f0000001940)={0x5, 0xfffffffa, 0x3, 0x0, 0x692af790, 0x102}) migrate_pages(r0, 0x2, &(0x7f0000000000)=0xc19, &(0x7f0000000040)=0x10001) 20:38:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000001, 0x4d032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={@local, @broadcast, 0x7, 0xa}}) madvise(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x64) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x0, 0x44, 0x16, 0x0, 0x0, 0x5, 0x86580, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x100000000, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8}, 0x48400, 0x0, 0x1, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x48b}, r0, 0x3, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, 0xf, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) [ 157.538663] ================================================================== [ 157.546057] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0x146f/0x17d0 [ 157.553411] Read of size 8 at addr ffff88808c7ef648 by task syz-executor.1/9942 [ 157.560894] [ 157.562520] CPU: 0 PID: 9942 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 157.570394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 157.580188] Call Trace: [ 157.582770] dump_stack+0x1b2/0x281 [ 157.586391] print_address_description.cold+0x54/0x1d3 [ 157.591654] kasan_report_error.cold+0x8a/0x191 [ 157.596309] ? unwind_next_frame+0x146f/0x17d0 [ 157.600878] __asan_report_load8_noabort+0x68/0x70 [ 157.605812] ? unwind_next_frame+0x146f/0x17d0 [ 157.610387] unwind_next_frame+0x146f/0x17d0 [ 157.614787] ? retint_kernel+0x2d/0x2d [ 157.618663] ? deref_stack_reg+0x1a0/0x1a0 [ 157.622883] ? check_preemption_disabled+0x35/0x240 [ 157.628003] ? retint_kernel+0x2d/0x2d [ 157.631879] perf_callchain_kernel+0x38c/0x520 [ 157.636460] ? arch_perf_update_userpage+0x300/0x300 [ 157.641551] ? retint_kernel+0x2d/0x2d [ 157.645429] ? perf_event_output_forward+0x143/0x1f0 [ 157.650529] ? check_preemption_disabled+0x35/0x240 [ 157.655535] get_perf_callchain+0x2de/0x740 [ 157.659856] ? put_callchain_buffers+0x60/0x60 [ 157.664431] ? __perf_event_overflow+0x1b6/0x310 [ 157.669205] perf_callchain+0x147/0x190 [ 157.673181] perf_prepare_sample+0xc9a/0x1370 [ 157.677668] ? perf_output_sample+0x16f0/0x16f0 [ 157.682331] perf_event_output_forward+0xc9/0x1f0 [ 157.687167] ? perf_prepare_sample+0x1370/0x1370 [ 157.691914] ? check_preemption_disabled+0x35/0x240 [ 157.696919] __perf_event_overflow+0x113/0x310 [ 157.701493] perf_swevent_event+0x3c8/0x460 [ 157.705803] perf_tp_event+0x540/0x6e0 [ 157.709684] ? check_preemption_disabled+0x35/0x240 [ 157.714690] ? perf_swevent_event+0x460/0x460 [ 157.719176] ? perf_trace_run_bpf_submit+0x119/0x200 [ 157.724362] ? perf_trace_lock+0x2d6/0x490 [ 157.728595] ? perf_trace_lock_acquire+0x510/0x510 [ 157.733515] ? finish_task_switch+0x178/0x610 [ 157.738023] ? perf_trace_run_bpf_submit+0x119/0x200 [ 157.743117] ? check_preemption_disabled+0x35/0x240 [ 157.748164] perf_trace_run_bpf_submit+0x119/0x200 [ 157.753103] perf_trace_lock+0x2d6/0x490 [ 157.757161] ? perf_trace_lock_acquire+0x510/0x510 [ 157.762082] ? perf_trace_lock_acquire+0x510/0x510 [ 157.767048] ? retint_kernel+0x2d/0x2d [ 157.770926] ? fs_reclaim_release+0xd0/0x110 [ 157.775321] ? perf_trace_lock_acquire+0x510/0x510 [ 157.780253] lock_release+0x4df/0x870 [ 157.784081] ? fs_reclaim_acquire+0xd4/0x120 [ 157.788558] ? lock_downgrade+0x740/0x740 [ 157.792709] __kmalloc+0x56/0x400 [ 157.796356] ? crypto_create_tfm+0x79/0x2d0 [ 157.800678] ? up_read+0x17/0x30 [ 157.804035] crypto_create_tfm+0x79/0x2d0 [ 157.808176] crypto_alloc_tfm+0x11a/0x250 [ 157.812318] ima_alloc_tfm+0x86/0xc0 [ 157.816028] ima_calc_field_array_hash+0x47/0xb0 [ 157.820785] ima_store_template+0xf5/0x220 [ 157.825010] ? ima_alloc_init_template+0x4e0/0x4e0 [ 157.830027] ? ima_alloc_init_template+0x385/0x4e0 [ 157.834952] ima_store_measurement+0x189/0x420 [ 157.839530] ? ima_collect_measurement+0x430/0x430 [ 157.844448] ? ima_d_path+0x4d/0x1e0 [ 157.848165] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 157.853605] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 157.858612] ? ima_d_path+0xa6/0x1e0 [ 157.862316] process_measurement+0x8db/0xb20 [ 157.866742] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 157.871758] ? ext4_release_file+0x2d0/0x2d0 [ 157.876162] ? apparmor_file_alloc_security+0x800/0x800 [ 157.881517] ? lock_downgrade+0x740/0x740 [ 157.885657] ? file_ra_state_init+0xc4/0x1e0 [ 157.890054] ? do_dentry_open+0x698/0xec0 [ 157.894190] ? ext4_release_file+0x2d0/0x2d0 [ 157.898596] ? __inode_permission+0xcd/0x2f0 [ 157.903000] ? vfs_open+0x10d/0x220 [ 157.906625] path_openat+0x10ad/0x2970 [ 157.910507] ? path_lookupat+0x780/0x780 [ 157.914556] ? perf_trace_lock+0x2d6/0x490 [ 157.918782] do_filp_open+0x179/0x3c0 [ 157.922572] ? may_open_dev+0xe0/0xe0 [ 157.926363] ? lock_downgrade+0x740/0x740 [ 157.930501] ? do_raw_spin_unlock+0x164/0x220 [ 157.934988] ? _raw_spin_unlock+0x29/0x40 [ 157.939130] ? __alloc_fd+0x1be/0x490 [ 157.942922] do_sys_open+0x296/0x410 [ 157.946623] ? filp_open+0x60/0x60 [ 157.950152] ? do_syscall_64+0x4c/0x640 [ 157.954128] ? SyS_open+0x30/0x30 [ 157.957575] do_syscall_64+0x1d5/0x640 [ 157.961494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 157.966935] RIP: 0033:0x7fb1aa018409 [ 157.970721] RSP: 002b:00007fb1a898d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.978506] RAX: ffffffffffffffda RBX: 00007fb1aa12af80 RCX: 00007fb1aa018409 [ 157.985765] RDX: 0000000000100002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 157.993023] RBP: 00007fb1aa073367 R08: 0000000000000000 R09: 0000000000000000 [ 158.000364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.007726] R13: 00007ffc9268c38f R14: 00007fb1a898d300 R15: 0000000000022000 [ 158.014986] [ 158.016599] The buggy address belongs to the page: [ 158.021521] page:ffffea000231fbc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 158.029665] flags: 0xfff00000000000() [ 158.033454] raw: 00fff00000000000 0000000000000000 0000000000000000 00000000ffffffff [ 158.041328] raw: 0000000000000000 0000000100000001 0000000000000000 0000000000000000 [ 158.049373] page dumped because: kasan: bad access detected [ 158.055063] [ 158.056712] Memory state around the buggy address: [ 158.061647] ffff88808c7ef500: 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 158.069015] ffff88808c7ef580: f1 f1 f1 04 f2 00 f3 f3 f3 00 00 00 00 00 00 00 [ 158.076450] >ffff88808c7ef600: 00 00 00 f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 [ 158.083801] ^ [ 158.089495] ffff88808c7ef680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.096838] ffff88808c7ef700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.104183] ================================================================== [ 158.111524] Disabling lock debugging due to kernel taint [ 158.116983] Kernel panic - not syncing: panic_on_warn set ... [ 158.116983] [ 158.124334] CPU: 0 PID: 9942 Comm: syz-executor.1 Tainted: G B 4.14.292-syzkaller #0 [ 158.133327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 158.142663] Call Trace: [ 158.145241] dump_stack+0x1b2/0x281 [ 158.148855] panic+0x1f9/0x42d [ 158.152034] ? add_taint.cold+0x16/0x16 [ 158.155996] ? lock_downgrade+0x740/0x740 [ 158.160130] ? add_taint.cold+0x5/0x16 [ 158.164004] kasan_end_report+0x43/0x49 [ 158.167970] kasan_report_error.cold+0xa7/0x191 [ 158.172627] ? unwind_next_frame+0x146f/0x17d0 [ 158.177203] __asan_report_load8_noabort+0x68/0x70 [ 158.182134] ? unwind_next_frame+0x146f/0x17d0 [ 158.186752] unwind_next_frame+0x146f/0x17d0 [ 158.191158] ? retint_kernel+0x2d/0x2d [ 158.195045] ? deref_stack_reg+0x1a0/0x1a0 [ 158.199270] ? check_preemption_disabled+0x35/0x240 [ 158.204372] ? retint_kernel+0x2d/0x2d [ 158.208256] perf_callchain_kernel+0x38c/0x520 [ 158.212829] ? arch_perf_update_userpage+0x300/0x300 [ 158.218020] ? retint_kernel+0x2d/0x2d [ 158.221989] ? perf_event_output_forward+0x143/0x1f0 [ 158.227078] ? check_preemption_disabled+0x35/0x240 [ 158.232082] get_perf_callchain+0x2de/0x740 [ 158.236393] ? put_callchain_buffers+0x60/0x60 [ 158.241000] ? __perf_event_overflow+0x1b6/0x310 [ 158.245745] perf_callchain+0x147/0x190 [ 158.249739] perf_prepare_sample+0xc9a/0x1370 [ 158.254225] ? perf_output_sample+0x16f0/0x16f0 [ 158.258883] perf_event_output_forward+0xc9/0x1f0 [ 158.263722] ? perf_prepare_sample+0x1370/0x1370 [ 158.268487] ? check_preemption_disabled+0x35/0x240 [ 158.273508] __perf_event_overflow+0x113/0x310 [ 158.278094] perf_swevent_event+0x3c8/0x460 [ 158.282497] perf_tp_event+0x540/0x6e0 [ 158.286376] ? check_preemption_disabled+0x35/0x240 [ 158.291384] ? perf_swevent_event+0x460/0x460 [ 158.295869] ? perf_trace_run_bpf_submit+0x119/0x200 [ 158.300974] ? perf_trace_lock+0x2d6/0x490 [ 158.305200] ? perf_trace_lock_acquire+0x510/0x510 [ 158.310120] ? finish_task_switch+0x178/0x610 [ 158.314608] ? perf_trace_run_bpf_submit+0x119/0x200 [ 158.319706] ? check_preemption_disabled+0x35/0x240 [ 158.324717] perf_trace_run_bpf_submit+0x119/0x200 [ 158.329658] perf_trace_lock+0x2d6/0x490 [ 158.333710] ? perf_trace_lock_acquire+0x510/0x510 [ 158.338632] ? perf_trace_lock_acquire+0x510/0x510 [ 158.343554] ? retint_kernel+0x2d/0x2d [ 158.347516] ? fs_reclaim_release+0xd0/0x110 [ 158.351950] ? perf_trace_lock_acquire+0x510/0x510 [ 158.356903] lock_release+0x4df/0x870 [ 158.360727] ? fs_reclaim_acquire+0xd4/0x120 [ 158.365137] ? lock_downgrade+0x740/0x740 [ 158.369278] __kmalloc+0x56/0x400 [ 158.372724] ? crypto_create_tfm+0x79/0x2d0 [ 158.377035] ? up_read+0x17/0x30 [ 158.380390] crypto_create_tfm+0x79/0x2d0 [ 158.384528] crypto_alloc_tfm+0x11a/0x250 [ 158.388675] ima_alloc_tfm+0x86/0xc0 [ 158.392384] ima_calc_field_array_hash+0x47/0xb0 [ 158.397140] ima_store_template+0xf5/0x220 [ 158.401457] ? ima_alloc_init_template+0x4e0/0x4e0 [ 158.406378] ? ima_alloc_init_template+0x385/0x4e0 [ 158.411298] ima_store_measurement+0x189/0x420 [ 158.415872] ? ima_collect_measurement+0x430/0x430 [ 158.420786] ? ima_d_path+0x4d/0x1e0 [ 158.424505] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 158.429947] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 158.434957] ? ima_d_path+0xa6/0x1e0 [ 158.438666] process_measurement+0x8db/0xb20 [ 158.443066] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 158.448078] ? ext4_release_file+0x2d0/0x2d0 [ 158.452492] ? apparmor_file_alloc_security+0x800/0x800 [ 158.457949] ? lock_downgrade+0x740/0x740 [ 158.462092] ? file_ra_state_init+0xc4/0x1e0 [ 158.466490] ? do_dentry_open+0x698/0xec0 [ 158.470624] ? ext4_release_file+0x2d0/0x2d0 [ 158.475020] ? __inode_permission+0xcd/0x2f0 [ 158.479414] ? vfs_open+0x10d/0x220 [ 158.483036] path_openat+0x10ad/0x2970 [ 158.486913] ? path_lookupat+0x780/0x780 [ 158.490981] ? perf_trace_lock+0x2d6/0x490 [ 158.495214] do_filp_open+0x179/0x3c0 [ 158.499010] ? may_open_dev+0xe0/0xe0 [ 158.502800] ? lock_downgrade+0x740/0x740 [ 158.506938] ? do_raw_spin_unlock+0x164/0x220 [ 158.511422] ? _raw_spin_unlock+0x29/0x40 [ 158.515588] ? __alloc_fd+0x1be/0x490 [ 158.519379] do_sys_open+0x296/0x410 [ 158.523346] ? filp_open+0x60/0x60 [ 158.526971] ? do_syscall_64+0x4c/0x640 [ 158.530930] ? SyS_open+0x30/0x30 [ 158.534369] do_syscall_64+0x1d5/0x640 [ 158.538246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 158.543428] RIP: 0033:0x7fb1aa018409 [ 158.547135] RSP: 002b:00007fb1a898d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.554839] RAX: ffffffffffffffda RBX: 00007fb1aa12af80 RCX: 00007fb1aa018409 [ 158.562132] RDX: 0000000000100002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 158.569408] RBP: 00007fb1aa073367 R08: 0000000000000000 R09: 0000000000000000 [ 158.576674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.583968] R13: 00007ffc9268c38f R14: 00007fb1a898d300 R15: 0000000000022000 [ 158.591406] Kernel Offset: disabled [ 158.595043] Rebooting in 86400 seconds..