[info] Using makefile-style concurrent boot in runlevel 2. [ 24.760342] audit: type=1800 audit(1541567788.763:21): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 24.786884] audit: type=1800 audit(1541567788.763:22): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. 2018/11/07 05:16:53 fuzzer started 2018/11/07 05:16:55 dialing manager at 10.128.0.26:33665 2018/11/07 05:17:04 syscalls: 1 2018/11/07 05:17:04 code coverage: enabled 2018/11/07 05:17:04 comparison tracing: enabled 2018/11/07 05:17:04 setuid sandbox: enabled 2018/11/07 05:17:04 namespace sandbox: enabled 2018/11/07 05:17:04 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/07 05:17:04 fault injection: enabled 2018/11/07 05:17:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/07 05:17:04 net packed injection: enabled 2018/11/07 05:17:04 net device setup: enabled 05:19:47 executing program 0: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syzkaller login: [ 223.644677] IPVS: ftp: loaded support on port[0] = 21 05:19:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) [ 223.919436] IPVS: ftp: loaded support on port[0] = 21 05:19:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000380)='T', 0x1}], 0x1) sendto$inet(r1, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) writev(r1, &(0x7f000042a000)=[{&(0x7f00001e3f5a)='-', 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000004c0)='&', 0x1, 0x0, 0x0, 0x0) [ 224.265710] IPVS: ftp: loaded support on port[0] = 21 05:19:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x88901) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '$#\x00'}, 0x9) ioctl$int_in(r0, 0x800040c0045006, &(0x7f0000000100)=0x7) [ 224.649980] IPVS: ftp: loaded support on port[0] = 21 05:19:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000000000"], 0x10}}, 0x0) [ 224.973426] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.994839] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.005370] device bridge_slave_0 entered promiscuous mode [ 225.122602] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.146979] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.171227] IPVS: ftp: loaded support on port[0] = 21 [ 225.177109] device bridge_slave_1 entered promiscuous mode [ 225.270868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.366452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:19:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x101d0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x0, &(0x7f0000000580)=ANY=[]) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) [ 225.698997] IPVS: ftp: loaded support on port[0] = 21 [ 225.807171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.928696] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.941766] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.962555] device bridge_slave_0 entered promiscuous mode [ 225.975000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.120760] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.133032] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.148165] device bridge_slave_1 entered promiscuous mode [ 226.169052] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.181340] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.189661] device bridge_slave_0 entered promiscuous mode [ 226.267422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.323878] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.346905] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.354293] device bridge_slave_1 entered promiscuous mode [ 226.370774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.525230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.576503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.594088] team0: Port device team_slave_0 added [ 226.664335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.715625] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.722165] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.734992] device bridge_slave_0 entered promiscuous mode [ 226.751414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.773806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.796012] team0: Port device team_slave_1 added [ 226.864696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.890183] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.896953] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.907432] device bridge_slave_1 entered promiscuous mode [ 226.941627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.969046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.985927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.028049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.049289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.083359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.168861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.176465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.204257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.212459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.228641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.298827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.312608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.324374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.429032] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.435421] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.454341] device bridge_slave_0 entered promiscuous mode [ 227.472845] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.488048] team0: Port device team_slave_0 added [ 227.546236] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.553790] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.575309] device bridge_slave_1 entered promiscuous mode [ 227.624130] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.633750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.649596] team0: Port device team_slave_1 added [ 227.682284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.763725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.770960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.779907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.793464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.805381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.877139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.884150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.907261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.927939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.936083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.952371] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.966827] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.973890] device bridge_slave_0 entered promiscuous mode [ 228.001971] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.025015] team0: Port device team_slave_0 added [ 228.039804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.057352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.066881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.075428] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.089700] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.097841] device bridge_slave_1 entered promiscuous mode [ 228.119117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.126766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.145324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.207264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.214892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.241946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.252145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.259979] team0: Port device team_slave_1 added [ 228.280507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.313613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.334927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.436026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.462124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.542397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.567268] team0: Port device team_slave_0 added [ 228.574382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.607678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.627617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.645493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.658097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.680852] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.706379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.719634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.728227] team0: Port device team_slave_1 added [ 228.737306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.745177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.758278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.770699] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.777246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.784454] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.790865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.827826] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.837900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.849351] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.882063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.891558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.927935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.968014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.974970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.997378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.018568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.047383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.092432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.105535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.156828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.163970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.173385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.261659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.275488] team0: Port device team_slave_0 added [ 229.295301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.317358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.337542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.399893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.411663] team0: Port device team_slave_1 added [ 229.531651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.552875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.571281] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.586617] team0: Port device team_slave_0 added [ 229.622251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.637495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.655126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.737327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.758076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.767962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.782718] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.800738] team0: Port device team_slave_1 added [ 229.807915] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.814281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.820923] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.827313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.834745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.845714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.876374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.900591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.969028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.976010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.993178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.092916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.107028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.117139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.245657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.264570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.285858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.351845] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.358403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.365021] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.371444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.386817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.395274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.420992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.436215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.558255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.577362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.633766] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.640214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.646944] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.653318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.669290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.269222] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.275618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.282347] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.288747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.330631] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.645688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.657321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.789895] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.796395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.803123] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.809533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.823544] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.667462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.899609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.389845] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.695967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.787686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.804078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.819192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.166299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.194790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.250528] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.584947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.611020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.637181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.644279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.660422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.866272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.999008] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.090284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.096484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.104596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.156979] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.317074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.408119] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.421642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.435500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.614245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.634452] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.837641] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.859496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.874698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.927952] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.015328] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.303304] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.415787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.426844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.441581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.844734] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.158702] hrtimer: interrupt took 28082 ns [ 238.432006] print_req_error: I/O error, dev loop3, sector 0 [ 238.438138] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 238.446279] print_req_error: I/O error, dev loop3, sector 8 [ 238.453576] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 238.461343] print_req_error: I/O error, dev loop3, sector 16 [ 238.467339] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 238.475027] print_req_error: I/O error, dev loop3, sector 24 [ 238.481065] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 238.488830] print_req_error: I/O error, dev loop3, sector 32 [ 238.494650] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 238.502844] print_req_error: I/O error, dev loop3, sector 40 [ 238.508721] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 238.516591] print_req_error: I/O error, dev loop3, sector 48 [ 238.523509] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 238.530991] print_req_error: I/O error, dev loop3, sector 56 [ 238.531238] print_req_error: I/O error, dev loop3, sector 64 [ 238.537361] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 238.542930] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 238.542999] print_req_error: I/O error, dev loop3, sector 72 [ 238.551198] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 239.021691] syz-executor0 (7072) used greatest stack depth: 14528 bytes left 05:20:03 executing program 0: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) [ 239.213231] device nr0 entered promiscuous mode 05:20:03 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) [ 239.665834] device nr0 entered promiscuous mode 05:20:03 executing program 0: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 05:20:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:04 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) [ 240.082727] device nr0 entered promiscuous mode 05:20:04 executing program 0: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) [ 240.262767] device nr0 entered promiscuous mode 05:20:04 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:04 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:04 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) [ 240.757645] device nr0 entered promiscuous mode 05:20:05 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:06 executing program 4: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 05:20:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x1f5, 0x20007ffc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)) 05:20:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:06 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="2957e1311f16f477671070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 05:20:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") [ 242.222541] device nr0 entered promiscuous mode 05:20:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) bind$bt_sco(r1, &(0x7f0000000040), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 05:20:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000000000010000, 0x0) openat(r2, &(0x7f0000000b40)='./file0\x00', 0x480000, 0x4) close(r1) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x9, 0x0, "0d36a04df72d0c5106fdd00296abdb100b53683b1eed5d925f1eae9332bc694a6ca70bd5210ceaa43f559df1f797656cf07e09e12d54221e20ccba4e46ceda"}, 0x60, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x4884) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffeffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x4, 0xe6d}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x8) 05:20:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1c, 0x101, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64}]}, 0x31d}}, 0x0) 05:20:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 05:20:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags=0x1000}) 05:20:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x2) read(r0, &(0x7f0000000100), 0x249) [ 242.662991] device nr0 entered promiscuous mode [ 242.682532] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 242.749265] netlink: 'syz-executor3': attribute type 1 has an invalid length. 05:20:06 executing program 4: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 05:20:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x1f5, 0x20007ffc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)) 05:20:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1c, 0x101, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64}]}, 0x31d}}, 0x0) 05:20:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags=0x1000}) [ 242.951951] netlink: 'syz-executor3': attribute type 1 has an invalid length. 05:20:07 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f0000000440)={'bond0\x00', @ifru_hwaddr=@broadcast}) 05:20:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1c, 0x101, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64}]}, 0x31d}}, 0x0) 05:20:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x2) read(r0, &(0x7f0000000100), 0x249) 05:20:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 05:20:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags=0x1000}) 05:20:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x2) read(r0, &(0x7f0000000100), 0x249) [ 243.101972] netlink: 'syz-executor3': attribute type 1 has an invalid length. 05:20:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1c, 0x101, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64}]}, 0x31d}}, 0x0) 05:20:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) [ 243.295821] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 243.452825] print_req_error: 801 callbacks suppressed [ 243.452881] print_req_error: I/O error, dev loop3, sector 256 [ 243.464783] buffer_io_error: 800 callbacks suppressed [ 243.464837] Buffer I/O error on dev loop3, logical block 32, lost async page write [ 243.479686] print_req_error: I/O error, dev loop3, sector 264 [ 243.485700] Buffer I/O error on dev loop3, logical block 33, lost async page write [ 243.493964] print_req_error: I/O error, dev loop3, sector 272 [ 243.500086] Buffer I/O error on dev loop3, logical block 34, lost async page write [ 243.509687] print_req_error: I/O error, dev loop3, sector 280 [ 243.515700] Buffer I/O error on dev loop3, logical block 35, lost async page write [ 243.524601] print_req_error: I/O error, dev loop3, sector 288 [ 243.530645] Buffer I/O error on dev loop3, logical block 36, lost async page write [ 243.538701] print_req_error: I/O error, dev loop3, sector 296 [ 243.545152] Buffer I/O error on dev loop3, logical block 37, lost async page write [ 243.553430] print_req_error: I/O error, dev loop3, sector 304 [ 243.559517] Buffer I/O error on dev loop3, logical block 38, lost async page write [ 243.567677] print_req_error: I/O error, dev loop3, sector 312 [ 243.573942] Buffer I/O error on dev loop3, logical block 39, lost async page write [ 243.582230] print_req_error: I/O error, dev loop3, sector 320 [ 243.588669] Buffer I/O error on dev loop3, logical block 40, lost async page write [ 243.597202] print_req_error: I/O error, dev loop3, sector 328 [ 243.603773] Buffer I/O error on dev loop3, logical block 41, lost async page write 05:20:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x2) read(r0, &(0x7f0000000100), 0x249) 05:20:07 executing program 4: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$can_raw(r3, &(0x7f0000002d40)={&(0x7f0000002c80)={0x1d, r4}, 0x10, &(0x7f0000002d00)={&(0x7f0000002cc0)=@can={{0x4, 0xfffffffffffffff7, 0xfffffffffffffeff, 0x5}, 0x3, 0x2, 0x0, 0x0, "44e7d677848f5e67"}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 05:20:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags=0x1000}) 05:20:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xb, 0x2) mmap$perf(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000100)=""/158, 0x9e) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:20:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x1f5, 0x20007ffc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)) 05:20:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 05:20:07 executing program 1: r0 = memfd_create(&(0x7f0000000080)="046e17e2e556fb5e2d3a434b83f2dc9c5bbadf69090c35d09336656aa2d9d0b90dac", 0x4) fcntl$setstatus(r0, 0x4, 0x40800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) 05:20:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 05:20:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2f0240316285717070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) 05:20:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x27a6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400100110000200008000f80428", 0x18}], 0x0, &(0x7f0000000140)) 05:20:08 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 05:20:08 executing program 2: pipe(&(0x7f0000e2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x1) r2 = gettid() readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x7) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00002cb000)={0x0, r2}) recvmsg(r4, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r4) tkill(r2, 0x16) [ 244.167407] FAT-fs (loop1): count of clusters too big (20979710) [ 244.206985] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.281871] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 244.289631] BUG: unable to handle kernel paging request at ffff880183e1fbb8 [ 244.296747] PGD be01067 P4D be01067 PUD 1cdcd7063 PMD 8000000183e001e3 [ 244.303521] Oops: 0011 [#1] PREEMPT SMP KASAN [ 244.308029] CPU: 1 PID: 7471 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 244.316523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.325887] RIP: 0010:0xffff880183e1fbb8 05:20:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x40001, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x1, 0x0, [], &(0x7f0000000100)={0x0, 0x0, [], @p_u8=&(0x7f00000000c0)}}) [ 244.329957] Code: ae 9d 86 3f 7c 30 00 f1 ff 1f d0 fc e1 83 01 88 ff ff f8 fd e1 83 01 88 ff ff 00 00 00 00 00 fc ff df 04 00 00 00 00 00 00 00 <78> fd e1 83 01 88 ff ff bc 9e 2b 81 ff ff ff ff f8 a8 75 bc 01 88 [ 244.346795] kobject: 'loop3' (0000000095f7eaaa): kobject_uevent_env [ 244.348970] RSP: 0018:ffff880183e1f508 EFLAGS: 00010216 [ 244.355388] kobject: 'loop3' (0000000095f7eaaa): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 244.360712] RAX: 0000000000040000 RBX: ffff880183e1fbb8 RCX: ffffc90006571000 [ 244.360719] RDX: 0000000000000373 RSI: ffffffff81ed5c9e RDI: ffff880183e1f588 [ 244.360727] RBP: ffff880183e1f6f0 R08: ffff8801bc75a080 R09: ffffed003b5e5b67 [ 244.360735] R10: ffffed003b5e5b67 R11: ffff8801daf2db3b R12: ffff8801c1042d40 [ 244.360743] R13: ffff880183e1f588 R14: 1ffff100307c3ea5 R15: dffffc0000000000 [ 244.360759] FS: 00007fe969614700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 244.414665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.420529] CR2: ffff880183e1fbb8 CR3: 00000001b8aab000 CR4: 00000000001406e0 [ 244.427800] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.435059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.442315] Call Trace: [ 244.444905] ? locks_remove_flock+0x236/0x350 [ 244.449390] ? flock_lock_inode+0x11c0/0x11c0 [ 244.453871] ? print_usage_bug+0xc0/0xc0 [ 244.457919] ? __perf_event_task_sched_out+0x33a/0x1ca0 [ 244.463271] ? __lock_acquire+0x62f/0x4c20 [ 244.467513] ? print_usage_bug+0xc0/0xc0 [ 244.471567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.477092] ? __lock_acquire+0x62f/0x4c20 [ 244.481317] ? graph_lock+0x270/0x270 [ 244.485104] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 244.490280] ? graph_lock+0x270/0x270 [ 244.494076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.499604] locks_remove_file+0x148/0x5c0 [ 244.503827] ? fcntl_setlk+0xfc0/0xfc0 [ 244.507703] ? fsnotify_first_mark+0x350/0x350 [ 244.512304] ? __fsnotify_parent+0xcc/0x420 [ 244.516611] ? perf_trace_sched_process_exec+0x860/0x860 [ 244.522080] ? fsnotify+0xf20/0xf20 [ 244.525710] ? __might_sleep+0x95/0x190 [ 244.529696] __fput+0x2f0/0xa70 [ 244.532967] ? get_max_files+0x20/0x20 [ 244.536849] ? trace_hardirqs_on+0xbd/0x310 [ 244.541166] ? kasan_check_read+0x11/0x20 [ 244.545318] ? task_work_run+0x1af/0x2a0 [ 244.549368] ? trace_hardirqs_off_caller+0x300/0x300 [ 244.554469] ? kernel_text_address+0x79/0xf0 [ 244.558882] ____fput+0x15/0x20 [ 244.562159] task_work_run+0x1e8/0x2a0 [ 244.566049] ? task_work_cancel+0x240/0x240 [ 244.570360] get_signal+0x1550/0x1970 [ 244.574174] ? locks_free_lock+0x295/0x420 [ 244.578395] ? do_syscall_64+0x1b9/0x820 [ 244.582464] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.587818] ? ptrace_notify+0x130/0x130 [ 244.591884] ? kasan_check_read+0x11/0x20 [ 244.596050] ? do_raw_spin_unlock+0xa7/0x330 [ 244.600459] ? trace_hardirqs_on+0x310/0x310 [ 244.604856] ? trace_hardirqs_off+0xb8/0x310 [ 244.609254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.614799] ? check_preemption_disabled+0x48/0x280 [ 244.619827] do_signal+0x9c/0x21c0 [ 244.623370] ? locks_free_lock+0x295/0x420 [ 244.627593] ? setup_sigcontext+0x7d0/0x7d0 [ 244.631903] ? kmem_cache_free+0x24f/0x290 [ 244.636126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.641649] ? exit_to_usermode_loop+0x8c/0x380 [ 244.646309] ? exit_to_usermode_loop+0x8c/0x380 [ 244.650987] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 244.655560] ? trace_hardirqs_on+0xbd/0x310 [ 244.659868] ? kick_process+0xed/0x170 [ 244.663745] ? do_syscall_64+0x6be/0x820 [ 244.667791] ? trace_hardirqs_off_caller+0x300/0x300 [ 244.672877] ? task_work_add+0x123/0x1e0 [ 244.676930] ? cpumask_weight.constprop.5+0x3f/0x3f [ 244.681937] exit_to_usermode_loop+0x2e5/0x380 [ 244.686505] ? __bpf_trace_sys_exit+0x30/0x30 [ 244.691002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.696548] ? fput+0x130/0x1a0 [ 244.699819] ? __x64_sys_flock+0x2bd/0x350 [ 244.704046] do_syscall_64+0x6be/0x820 [ 244.707923] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 244.713292] ? syscall_return_slowpath+0x5e0/0x5e0 [ 244.718229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.723062] ? trace_hardirqs_on_caller+0x310/0x310 [ 244.728067] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 244.733087] ? prepare_exit_to_usermode+0x291/0x3b0 [ 244.738116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.742949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.748126] RIP: 0033:0x457569 [ 244.751306] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.770191] RSP: 002b:00007fe969613c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 244.777886] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 0000000000457569 [ 244.785142] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 244.792393] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 244.799652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9696146d4 [ 244.806907] R13: 00000000004bdd9e R14: 00000000004ccdb8 R15: 00000000ffffffff [ 244.814165] Modules linked in: [ 244.817342] CR2: ffff880183e1fbb8 [ 244.820782] ---[ end trace 6cbd226ad7e6c060 ]--- [ 244.825527] RIP: 0010:0xffff880183e1fbb8 [ 244.829576] Code: ae 9d 86 3f 7c 30 00 f1 ff 1f d0 fc e1 83 01 88 ff ff f8 fd e1 83 01 88 ff ff 00 00 00 00 00 fc ff df 04 00 00 00 00 00 00 00 <78> fd e1 83 01 88 ff ff bc 9e 2b 81 ff ff ff ff f8 a8 75 bc 01 88 [ 244.848465] RSP: 0018:ffff880183e1f508 EFLAGS: 00010216 [ 244.853816] RAX: 0000000000040000 RBX: ffff880183e1fbb8 RCX: ffffc90006571000 [ 244.861073] RDX: 0000000000000373 RSI: ffffffff81ed5c9e RDI: ffff880183e1f588 [ 244.868329] RBP: ffff880183e1f6f0 R08: ffff8801bc75a080 R09: ffffed003b5e5b67 [ 244.875589] R10: ffffed003b5e5b67 R11: ffff8801daf2db3b R12: ffff8801c1042d40 [ 244.882865] R13: ffff880183e1f588 R14: 1ffff100307c3ea5 R15: dffffc0000000000 [ 244.890132] FS: 00007fe969614700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 244.898377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.904243] CR2: ffff880183e1fbb8 CR3: 00000001b8aab000 CR4: 00000000001406e0 [ 244.911515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.918774] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.926116] Kernel panic - not syncing: Fatal exception [ 244.932649] Kernel Offset: disabled [ 244.936280] Rebooting in 86400 seconds..