[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.142145] kauditd_printk_skb: 7 callbacks suppressed [ 28.142159] audit: type=1800 audit(1540296955.329:29): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.167438] audit: type=1800 audit(1540296955.329:30): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts. 2018/10/23 12:16:06 fuzzer started 2018/10/23 12:16:08 dialing manager at 10.128.0.26:34311 2018/10/23 12:16:09 syscalls: 1 2018/10/23 12:16:09 code coverage: enabled 2018/10/23 12:16:09 comparison tracing: enabled 2018/10/23 12:16:09 setuid sandbox: enabled 2018/10/23 12:16:09 namespace sandbox: enabled 2018/10/23 12:16:09 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/23 12:16:09 fault injection: enabled 2018/10/23 12:16:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/23 12:16:09 net packed injection: enabled 2018/10/23 12:16:09 net device setup: enabled 12:19:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syzkaller login: [ 236.226122] IPVS: ftp: loaded support on port[0] = 21 12:19:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10001) read(r0, &(0x7f0000000540)=""/11, 0xfffffcf2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 236.474664] IPVS: ftp: loaded support on port[0] = 21 12:19:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 236.809190] IPVS: ftp: loaded support on port[0] = 21 12:19:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8001000000000000"], 0x1}}, 0x0) [ 237.386205] IPVS: ftp: loaded support on port[0] = 21 [ 237.600085] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.615775] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.635615] device bridge_slave_0 entered promiscuous mode 12:19:24 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0xffffff19, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffcb, 0x0, 0x0, 0x1ab) [ 237.809069] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.815561] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.822849] device bridge_slave_1 entered promiscuous mode [ 237.960395] IPVS: ftp: loaded support on port[0] = 21 [ 238.033362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.226607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 12:19:25 executing program 5: socketpair$unix(0x1, 0x80400000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 238.534715] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.573677] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.582546] device bridge_slave_0 entered promiscuous mode [ 238.589558] IPVS: ftp: loaded support on port[0] = 21 [ 238.610700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.761067] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.768162] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.776069] device bridge_slave_1 entered promiscuous mode [ 238.784875] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.798271] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.807363] device bridge_slave_0 entered promiscuous mode [ 238.825287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.887890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.928209] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.957087] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.974892] device bridge_slave_1 entered promiscuous mode [ 239.028994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.129128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.228006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.442528] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.529142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.543917] team0: Port device team_slave_0 added [ 239.611223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.641352] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.664958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.680946] team0: Port device team_slave_1 added [ 239.754847] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.782928] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.795609] device bridge_slave_0 entered promiscuous mode [ 239.810741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.837774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.908107] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.915026] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.934372] device bridge_slave_1 entered promiscuous mode [ 239.968539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.054479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.182081] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.204175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.216547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.233188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.244664] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.262283] team0: Port device team_slave_0 added [ 240.352139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.374276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.384851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.409238] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.422099] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.431894] device bridge_slave_0 entered promiscuous mode [ 240.475211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.484651] team0: Port device team_slave_1 added [ 240.524753] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.566990] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.574378] device bridge_slave_1 entered promiscuous mode [ 240.589013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.630394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.653333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.664920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.689080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.700948] team0: Port device team_slave_0 added [ 240.708341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.724162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.756142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.764073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.781069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.825854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.838790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.856398] team0: Port device team_slave_1 added [ 240.870780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.889504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.916328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.940242] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.949950] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.964047] device bridge_slave_0 entered promiscuous mode [ 241.008705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.019392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.033542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.050947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.102370] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.124928] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.132176] device bridge_slave_1 entered promiscuous mode [ 241.166281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.175257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.196843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.222223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.279008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.286332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.302427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.345520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.356051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.415851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.423025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.432687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.536844] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.601522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.619379] team0: Port device team_slave_0 added [ 241.654356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.684599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.771213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.784360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.795993] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.803362] team0: Port device team_slave_1 added [ 241.834700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.962122] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.968652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.975584] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.981960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.990751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.007530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.031038] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.076269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.158582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.173684] team0: Port device team_slave_0 added [ 242.186426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.225658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.232797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.241453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.303433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.313526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.334956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.366480] team0: Port device team_slave_1 added [ 242.384291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.420290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.430593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.458819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.485982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.511382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.615124] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.621594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.628324] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.634701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.656285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.678089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.689204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.697420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.715221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.723579] team0: Port device team_slave_0 added [ 242.837526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.846599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.855369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.872811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.881790] team0: Port device team_slave_1 added [ 242.998863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.010491] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.016920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.023580] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.030010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.066437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.073637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.092138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.100507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.135177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.177058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.184325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.307256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.314477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.324072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.486884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.494061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.506441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.953600] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.960099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.966829] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.973208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.997190] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.185769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.514110] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.520574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.527298] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.533673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.568705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.105962] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.112385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.119098] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.125533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.142682] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.273710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.289372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.379325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.852187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.152768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.294387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.316092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.325094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.392658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.568150] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.746392] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.886703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.013633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.033286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.051610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.436119] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.468624] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.474799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.486179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.535403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.764714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.896811] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.972715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.163207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.322151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.451435] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.475816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.482929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.688595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.694790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.709940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.846392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.929417] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.126361] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.372625] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.396292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.411238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.857554] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.997193] input: syz1 as /devices/virtual/input/input5 [ 252.067434] input: syz1 as /devices/virtual/input/input6 12:19:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) [ 252.266823] hrtimer: interrupt took 29822 ns 12:19:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) 12:19:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) 12:19:39 executing program 0: 12:19:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10001) read(r0, &(0x7f0000000540)=""/11, 0xfffffcf2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 12:19:40 executing program 2: 12:19:40 executing program 0: 12:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x14}, 0x14}}, 0x40804) 12:19:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) getpid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000240)=""/227) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) 12:19:40 executing program 3: 12:19:41 executing program 4: 12:19:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read(r0, &(0x7f0000000140)=""/11, 0xfe4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$KDSKBLED(r1, 0x4b65, 0x0) 12:19:41 executing program 2: 12:19:41 executing program 1: 12:19:41 executing program 3: 12:19:41 executing program 5: 12:19:41 executing program 3: 12:19:41 executing program 1: 12:19:41 executing program 5: 12:19:41 executing program 2: 12:19:41 executing program 4: 12:19:41 executing program 1: 12:19:41 executing program 3: 12:19:44 executing program 0: 12:19:44 executing program 5: 12:19:44 executing program 2: 12:19:44 executing program 4: 12:19:44 executing program 3: 12:19:44 executing program 1: 12:19:44 executing program 5: 12:19:44 executing program 2: 12:19:44 executing program 4: 12:19:44 executing program 3: 12:19:44 executing program 1: 12:19:44 executing program 0: 12:19:44 executing program 4: 12:19:44 executing program 0: 12:19:44 executing program 2: 12:19:44 executing program 1: 12:19:44 executing program 3: 12:19:45 executing program 5: 12:19:45 executing program 1: 12:19:45 executing program 0: 12:19:45 executing program 2: 12:19:45 executing program 4: 12:19:45 executing program 3: 12:19:45 executing program 5: 12:19:45 executing program 1: 12:19:45 executing program 0: 12:19:45 executing program 2: 12:19:45 executing program 3: 12:19:45 executing program 4: 12:19:45 executing program 5: 12:19:45 executing program 0: 12:19:45 executing program 2: 12:19:45 executing program 1: 12:19:45 executing program 4: 12:19:45 executing program 3: 12:19:45 executing program 5: 12:19:45 executing program 0: 12:19:45 executing program 4: 12:19:45 executing program 2: 12:19:45 executing program 3: 12:19:45 executing program 1: 12:19:45 executing program 5: 12:19:45 executing program 0: 12:19:45 executing program 4: 12:19:45 executing program 2: 12:19:45 executing program 3: 12:19:45 executing program 5: 12:19:45 executing program 1: 12:19:45 executing program 0: 12:19:45 executing program 4: 12:19:45 executing program 1: 12:19:45 executing program 2: 12:19:45 executing program 3: 12:19:46 executing program 5: 12:19:46 executing program 0: 12:19:46 executing program 2: 12:19:46 executing program 3: 12:19:46 executing program 1: 12:19:46 executing program 5: 12:19:46 executing program 4: 12:19:46 executing program 0: 12:19:46 executing program 2: 12:19:46 executing program 1: 12:19:46 executing program 5: 12:19:46 executing program 3: 12:19:46 executing program 0: 12:19:46 executing program 4: 12:19:46 executing program 2: 12:19:46 executing program 5: 12:19:46 executing program 3: 12:19:46 executing program 1: 12:19:46 executing program 0: 12:19:46 executing program 4: 12:19:46 executing program 2: 12:19:46 executing program 3: 12:19:46 executing program 0: 12:19:46 executing program 1: 12:19:46 executing program 5: 12:19:46 executing program 4: 12:19:46 executing program 2: 12:19:46 executing program 3: 12:19:46 executing program 2: 12:19:46 executing program 4: 12:19:46 executing program 0: 12:19:46 executing program 5: 12:19:46 executing program 1: 12:19:46 executing program 0: 12:19:46 executing program 2: 12:19:46 executing program 3: 12:19:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) open(&(0x7f0000000000)='./bus\x00', 0x44, 0x146) prctl$intptr(0x1c, 0x1) execve(&(0x7f0000001340)='./bus\x00', &(0x7f0000000400), &(0x7f0000000340)) 12:19:46 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)="da3eb54dd0320e", 0x7}]) 12:19:47 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) 12:19:47 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x20}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc7f}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) 12:19:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) memfd_create(&(0x7f00000001c0)='\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000004c0)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:19:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) memfd_create(&(0x7f00000001c0)='\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000004c0)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:19:47 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)) 12:19:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) memfd_create(&(0x7f00000001c0)='\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:19:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x110) socket$inet(0x2, 0x8000f, 0x6a4) socket(0xb, 0x5, 0x3) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000100)) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast1}, 0xc) getsockname$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:19:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x84000, 0x0) 12:19:47 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x1, 0x2}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) [ 260.363578] audit: type=1800 audit(1540297187.549:31): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor2" name="cgroup.controllers" dev="sda1" ino=16580 res=0 [ 260.427921] audit: type=1800 audit(1540297187.579:32): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor2" name="hugetlb.2MB.usage_ir_bytes" dev="sda1" ino=16578 res=0 12:19:47 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1}]) 12:19:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) memfd_create(&(0x7f00000001c0)='\x00', 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000004c0)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:19:47 executing program 4: 12:19:48 executing program 2: 12:19:48 executing program 5: 12:19:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/204, 0xcc}], 0x1, 0x31) 12:19:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0xa, @in=@rand_addr, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f00000008c0)}}], 0x400000000000122, 0x0) 12:19:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000980)={@multicast1, @remote, @broadcast}, 0xc) 12:19:48 executing program 1: 12:19:48 executing program 5: 12:19:48 executing program 4: 12:19:48 executing program 2: 12:19:48 executing program 1: 12:19:48 executing program 4: 12:19:48 executing program 3: 12:19:48 executing program 0: 12:19:48 executing program 5: 12:19:48 executing program 2: 12:19:48 executing program 1: 12:19:48 executing program 4: 12:19:48 executing program 5: dup(0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x30, 0x8, 0x0, 0x3, 0x6, 0x8, 0x2d7, 0x40, 0x163, 0x6, 0x6, 0x38, 0x1, 0x9, 0x7, 0x100000001}, [{0x1, 0x1, 0x9, 0xfe13, 0x11f, 0x9fa, 0x7fff, 0x4}], "5ace0456801c6528d80d1e214909eff595d73269bdc94b1b72fcf7dc553e300c332e656e1db9d405e4b06139481450bf3b69cd320479754299255ac722159915ccc053d4c99768a2579c7947ba017425cf300b57147f6eddc681654bc847cae055e83466ee191dba1ee227b2d684a66dd9b96535c9c12b53c024c78e00465b553a91d25e48b1e7182a9100ff2382d51536", [[]]}, 0x209) pread64(0xffffffffffffffff, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000540)="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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000004c0)=0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') 12:19:48 executing program 2: 12:19:48 executing program 1: 12:19:48 executing program 0: 12:19:48 executing program 4: 12:19:48 executing program 3: 12:19:48 executing program 2: 12:19:48 executing program 1: 12:19:48 executing program 0: 12:19:48 executing program 4: 12:19:48 executing program 3: 12:19:48 executing program 1: 12:19:49 executing program 5: 12:19:49 executing program 3: 12:19:49 executing program 2: 12:19:49 executing program 0: 12:19:49 executing program 4: 12:19:49 executing program 1: 12:19:49 executing program 2: 12:19:49 executing program 1: 12:19:49 executing program 3: 12:19:49 executing program 0: 12:19:49 executing program 4: 12:19:49 executing program 5: 12:19:49 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000440)=""/194, 0xc2) 12:19:49 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "3beb84e79a760c4095303421a72cf4633f12e018587227350d0ff7851dcf00f3337ecff75433f8cf148e1feabac5e88e7be197ff71c325ff3872de2d9b1287", 0x3e}, 0x60) 12:19:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100)=0x4acb, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="440f35410f01df3e652e36f0ff40013664440f01f866b895000f00d80f005c878e0f20dc3e640f23c065440f0966470f388217", 0x33}], 0x1, 0x0, &(0x7f0000000280), 0x352) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:49 executing program 0: syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@integrity='integrity'}]}) 12:19:49 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) 12:19:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:19:49 executing program 5: [ 262.336060] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 12:19:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000005c0), 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x0, 0x0, &(0x7f0000000a80)) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) 12:19:49 executing program 5: 12:19:49 executing program 0: syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@integrity='integrity'}]}) 12:19:49 executing program 1: [ 262.570208] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 262.592691] kvm: emulating exchange as write 12:19:49 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 12:19:49 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file1\x00', 0x0) [ 262.710648] audit: type=1804 audit(1540297189.889:33): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir464195640/syzkaller.KFkHc6/29/file0/file0" dev="overlay" ino=24666 res=1 12:19:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000000500)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x930000) [ 262.772538] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 12:19:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x16) connect$unix(r2, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r2, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) accept4$unix(r2, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000300)={0x7ff, 0x8, 0x8, 0x4, 0xb2b}) close(r2) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x2000800007, 0x4}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$inet6_int(r4, 0x29, 0xd7, &(0x7f00000001c0)=0x7, 0x4) msgget$private(0x0, 0x1) 12:19:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) [ 262.823799] overlayfs: './file0' not a directory 12:19:50 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file1\x00', 0x0) 12:19:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460000000000000000000006523db9ffffff0000800000000000000027d86447365a78194000f4ff00000a"], 0x2e) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xbb) 12:19:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x15, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:19:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x40045566, &(0x7f0000000080)) 12:19:50 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x2e001, 0x0) 12:19:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@swidth={'swidth', 0x3d, 0x1}}]}) 12:19:50 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file1\x00', 0x0) 12:19:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x4004556a, &(0x7f0000000080)) 12:19:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000005c0), 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 263.181707] XFS (loop3): sunit and swidth must be specified together 12:19:50 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file1\x00', 0x0) [ 263.260496] XFS (loop3): sunit and swidth must be specified together 12:19:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x54, 0x0, 0x0, "7fc365fbfe64e02655b328223c17435024f9a7063dd0775fbb018b46359689e15b64d83bdc4be37349d985308d3eb5e34b3ae701978d9dc6423c038530fc7f1e08980fb2e24b67948ed76d08081763ca4a0db67c"}) 12:19:50 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000200), &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ptmx\x00', 0x0, 0x0) 12:19:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x80000000, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="440f35410f01df3e652e36f0ff40013664440f01f866b895000f00d80f005c878e0f20dc3e640f23c065440f0966470f388217", 0x33}], 0x1, 0x0, &(0x7f0000000280), 0x352) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:50 executing program 4: syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="ff9333a3679026ccfc703ef0cfbbed1e3247acd6a3a73143155881676e74f5a5efcc3676e26e4df1d8e92d23e362327475a76e72d81116ede3f4e36646a2f194f1b2dd7913c34ed95a3e2f6150a3717f0a19785e835497518916455091a1826ab78a631d8bd58acc40ec613a1c9d7661d6960ae1fa46b03fad448c7a24f78f565af60ee393134e51c6b7c687550ede8756", 0x91, 0x4}], 0x0, &(0x7f0000000580)={[{@discard_size={'discard', 0x3d, 0x6}}, {@integrity='integrity'}, {@resize='resize'}, {@uid={'uid'}}, {@resize_size={'resize', 0x3d, 0xffffffff}}, {@nointegrity='nointegrity'}, {@discard_size={'discard', 0x3d, 0x3}}, {@nodiscard='nodiscard'}], [{@hash='hash'}, {@dont_measure='dont_measure'}]}) 12:19:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004240)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000200)="e28da570395bb7cee86147b30b89e620294c39fe5e19e843d008531af742155a19c1daf70b3cb4db292662cf85891aeb3667963dc011a96cfeb30cb226584266626b45558dd871a28e685e73eb44535ec42189b093f667b841c978dea7ab41d742a51b1e048a72f5afcf024740b4b3d4183bca5f8f399e178b8acb85d0673efc22b4a10fe199cdf9d2c779", 0x8b}], 0x1, &(0x7f0000001840)}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="440f35410f01df3e652e36f0ff40013664440f01f866b895000f00d80f005c878e0f20dc3e640f23c065440f0966470f388217", 0x33}], 0x1, 0x0, &(0x7f0000000280), 0x352) [ 263.505343] JFS: discard option not supported on device 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f212", 0x115, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={"698a7a30000500"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) [ 263.552841] JFS: Cannot determine volume size [ 263.569438] JFS: discard option not supported on device [ 263.590252] jfs: Unrecognized mount option "hash" or missing value 12:19:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05", [0x0, 0x4]}) 12:19:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000d1a000), 0x1c) 12:19:50 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 12:19:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000300)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000140), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x1000000003, 0x2}) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 263.706538] JFS: discard option not supported on device [ 263.729321] JFS: Cannot determine volume size 12:19:51 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0, &(0x7f00000006c0), 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000000)=0x80, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)) [ 263.766603] JFS: discard option not supported on device [ 263.778991] jfs: Unrecognized mount option "hash" or missing value 12:19:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) pread64(r2, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) 12:19:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) getpeername$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000780)={@loopback, 0x0, r1}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) r2 = open(&(0x7f0000000480)='./file0\x00', 0x42042, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000e40)=0xe8) write(r2, &(0x7f0000000380)="fc015002a2a55e34da6d2a2999d8da9474917335f8e2f9da2a75722ec004a5e6e244499c012b7a80b129b96d8fa518fef1eecc7743f4d9696018d4ded15ff21514c139a444e6f7fee6c2516c0d0e93af05e4a8e71bba4454ab2f6e4de6c454436aba2ecc85e074e298c636aea13335e8accc35cda0cd07c984199ed8033f42caaebd3d0799c3bae6edc867c1cb2d4135a3823251ad67cf889a9deb7f1e681b887fad714d170c9284168f5097be", 0xad) getpeername$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x2d4) flistxattr(r4, &(0x7f00000005c0)=""/117, 0x75) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xc59, 0x6, 0x1000, 0x401, 0x4000000000000000}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000300)={r5, 0x7}, 0x8) sendfile(r2, r2, &(0x7f00000000c0), 0x8080ffffff10) ioctl$KDMKTONE(r2, 0x4b30, 0xfff) fcntl$setpipe(r4, 0x407, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000002c0)=0x6) [ 263.811840] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:19:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000700)) 12:19:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'user.', 'selinux$\x00'}, &(0x7f00000001c0)=""/223, 0xdf) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000005c0), 0x0) ioctl$KVM_NMI(r2, 0xae9a) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000067, &(0x7f00000000c0)=0xcd8, 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 12:19:51 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 12:19:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) getpgrp(0x0) 12:19:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fchmod(r2, 0x2071bbc47a32294c) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e"], 0x1) [ 264.163557] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:19:51 executing program 0: accept4$packet(0xffffffffffffff9c, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a80)=0x14, 0x0) mremap(&(0x7f0000554000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000183000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 12:19:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 12:19:51 executing program 3: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 264.280052] audit: type=1804 audit(1540297191.469:34): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir175156405/syzkaller.6FSDmB/36/file0/file0" dev="loop1" ino=3 res=1 12:19:51 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x1009020, &(0x7f00000001c0)='\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) 12:19:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) getpeername$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000780)={@loopback, 0x0, r1}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) r2 = open(&(0x7f0000000480)='./file0\x00', 0x42042, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000e40)=0xe8) write(r2, &(0x7f0000000380)="fc015002a2a55e34da6d2a2999d8da9474917335f8e2f9da2a75722ec004a5e6e244499c012b7a80b129b96d8fa518fef1eecc7743f4d9696018d4ded15ff21514c139a444e6f7fee6c2516c0d0e93af05e4a8e71bba4454ab2f6e4de6c454436aba2ecc85e074e298c636aea13335e8accc35cda0cd07c984199ed8033f42caaebd3d0799c3bae6edc867c1cb2d4135a3823251ad67cf889a9deb7f1e681b887fad714d170c9284168f5097be", 0xad) getpeername$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x2d4) flistxattr(r4, &(0x7f00000005c0)=""/117, 0x75) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xc59, 0x6, 0x1000, 0x401, 0x4000000000000000}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000300)={r5, 0x7}, 0x8) sendfile(r2, r2, &(0x7f00000000c0), 0x8080ffffff10) ioctl$KDMKTONE(r2, 0x4b30, 0xfff) fcntl$setpipe(r4, 0x407, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000002c0)=0x6) 12:19:51 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='net/protocols\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2000, @thr={&(0x7f00000002c0), &(0x7f0000000440)}}, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000800008000000000e4ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.408946] audit: type=1804 audit(1540297191.499:35): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir175156405/syzkaller.6FSDmB/36/file0/file0" dev="loop1" ino=3 res=1 12:19:51 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f0000000100)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x1009020, &(0x7f00000001c0)='\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[], 0x0, 0x0) 12:19:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}) 12:19:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 12:19:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) accept4(r1, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f00000000c0)=0x80, 0x800) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@assoc={0x18}], 0x18}, 0x0) 12:19:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000001) ioctl(r0, 0x100008912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x400000000000435, 0x10922, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002800010b00000000000000000e78640f"], 0x1}}, 0x0) [ 264.693356] kvm [7789]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc1 data 0x6000000ff00 [ 264.725405] kvm [7789]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc2 data 0x6000000ff00 12:19:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) accept4(r1, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f00000000c0)=0x80, 0x800) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@assoc={0x18}], 0x18}, 0x0) 12:19:52 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='net/protocols\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2000, @thr={&(0x7f00000002c0), &(0x7f0000000440)}}, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000800008000000000e4ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:52 executing program 2: r0 = gettid() getrandom(&(0x7f00000002c0)=""/2, 0x2dd, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000200)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 12:19:52 executing program 3: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 265.102134] kvm [7823]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc1 data 0x6000000ff00 [ 265.112963] kvm [7823]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc2 data 0x6000000ff00 12:19:52 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrandom(&(0x7f00000002c0)=""/2, 0x2dd, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000200)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 12:19:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x2d, 0x2, 0x8, 0x8, 0x0, 0x3d5446dd, 0x0, 0xa7, 0xffffffffffffffff}}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) syz_open_pts(r4, 0x0) 12:19:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0xfffffffffffffd03) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x16, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 12:19:52 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='net/protocols\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2000, @thr={&(0x7f00000002c0), &(0x7f0000000440)}}, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000800008000000000e4ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:52 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) 12:19:52 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)) 12:19:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) [ 265.513670] kvm [7843]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc1 data 0x6000000ff00 [ 265.545961] kvm [7843]: vcpu0, guest rIP: 0x102 disabled perfctr wrmsr: 0xc2 data 0x6000000ff00 12:19:52 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) 12:19:52 executing program 0: socket(0xa, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r0, &(0x7f00000002c0), &(0x7f0000950000)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0xb401}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) 12:19:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 12:19:52 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) 12:19:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, "e9b507c9c6847e8e525de6e0d456180ac788bf6d4b3c0e869f1bb2847594b926222e92969480e0f243e2b68e106d7f4f0e47049a7f8ec49d685f024423a74ac5", "fec1d5d0074b052b95915f8212ff84de0c572c91fda7ab1c93196ae6994b1d7f9d1bbf6551cef1e4c2bfbce593d9d7cf119d5c118da9e346fe521c9c5b1a4481", "bc6e5813197faeb13320125d6d3c38e628eada82a4f687b653a1c35a49ac63ad"}) 12:19:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000300)) 12:19:53 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='net/protocols\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2000, @thr={&(0x7f00000002c0), &(0x7f0000000440)}}, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000800008000000000e4ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffffffffffffffe, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000}) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002f, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000240)) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7599af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@local, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000ac0)=0xe8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000300)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x108) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000780)={&(0x7f0000000500), 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x18, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) fstat(0xffffffffffffffff, &(0x7f0000000580)) chown(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 12:19:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "56f328d87696d8a201f863d95938b14adc8508a1d4e3b400c38428327fabf2a28500f1398cc3d0d57d322d9c6c2968b5ecf4541fb43fba02cb567ad2bcfbe134", "e6b001a317a38402a6b88b9f6a0a7292e4e191b9fb36e5c7532212ca5fc03d5feea30c9d5be348440d6b91307b5544982f04697e01dd14be36b21154f6c94eb3", "645d099a35acdb32c71abbdff3a00c4d15fde08f9fd026cc5580b7eaf70772d1"}) 12:19:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x15, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:19:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 12:19:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x1) 12:19:53 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setuid(r1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600), &(0x7f0000000a00)) 12:19:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001300)='/dev/zero\x00', 0x200000, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001780)=[@text64={0x40, &(0x7f0000001700)="b9fe090000b8a8fda463ba000000000f30f20f01c9b9b5080000b804000000ba000000000f3066baf80cb865fb9884ef66bafc0cb000ee643e0f91150f000080b99a0b00000f3266f20f01f8c4412e2a68ccf3f2410f06450f01f8", 0x5b}], 0x1, 0x0, &(0x7f00000017c0), 0x0) 12:19:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:19:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = memfd_create(&(0x7f0000000500)='em0nodeveth1lo\x00', 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x4], 0x0, 0xd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) 12:19:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497806a44bbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0xa, 0x522000000003, 0x11) write$cgroup_int(r2, &(0x7f0000000000), 0x12) getpid() ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)) 12:19:53 executing program 0: socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000140)) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000180)}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) close(r2) 12:19:53 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000001640)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/180, 0xb4}], 0x2, &(0x7f0000002c40)=""/4096, 0x1000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000000080)=ANY=[]}, 0x0) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000005380), 0x0, &(0x7f0000005400)=""/184, 0xb8}, 0x0) [ 266.533645] device nr0 entered promiscuous mode 12:19:54 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xd, 0x0, 0x4, 0x651, 0x0, 0xffffffffffffffff, 0x1f}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3f) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x651}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4002) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 12:19:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xfffffffc}}, 0xb8}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000200), 0x4) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x1) 12:19:54 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:19:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, "", 0x30}]}, 0x2) 12:19:54 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3f) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000025007f00000100e0ffffff0000062ced000100ff10", 0x19) 12:19:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') sendfile(r1, r0, &(0x7f0000000240), 0x239fffffffffffb) 12:19:54 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) 12:19:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xb) write(r0, &(0x7f00000000c0)="2400000024007f000000000000007701000000ff0100e0ffffff0000062000000100ff10", 0x24) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) 12:19:54 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 5: r0 = socket$inet6(0xa, 0x401000000000002, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x153, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r1) ioctl(r0, 0x8912, &(0x7f0000000340)="153f6234488dd25d766070") 12:19:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ee, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3f) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x6, 0x0) ioctl(r2, 0x8912, &(0x7f00000002c0)="153f6234488dd25d766070") setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), 0x8) sendto$inet6(r1, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}, [0x0, 0x7]}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 12:19:54 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000001) sendmmsg(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x1f, 0x0, @local}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[{0xe20, 0x0, 0x0, "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"}], 0xe20, 0x44050}, 0xf48}], 0x1, 0x4000) 12:19:54 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 12:19:55 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) 12:19:55 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@dev, @loopback}, &(0x7f0000000280)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x9, &(0x7f00000000c0)='cpuset}$\x00', 0xffffffffffffffff}, 0x30) 12:19:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:55 executing program 3: socket$netlink(0x10, 0x3, 0x7) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket(0x10, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000a00)="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", 0x166, 0x2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r2, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x1000000000000030, 0x0) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r2, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000340)=0x80) poll(&(0x7f00000004c0)=[{r0, 0x2030}, {r4, 0x408}, {r2, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xfffffd44) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x1f, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) 12:19:55 executing program 5: r0 = socket$inet6(0xa, 0x401000000000002, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x153, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r1) ioctl(r0, 0x8912, &(0x7f0000000340)="153f6234488dd25d766070") 12:19:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000440)=[@flat={0x77622a85, 0x10b}, @fda={0x66646185, 0x0, 0x0, 0x3d}], &(0x7f00000004c0)=[0x38]}}], 0x1, 0x0, &(0x7f00000000c0)="e1"}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) 12:19:55 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000100)) [ 268.128398] binder: 8089:8090 ioctl c0306201 20000040 returned -14 [ 268.181445] binder: 8089:8097 ioctl c0306201 20000040 returned -14 [ 268.228163] binder: 8100:8101 got reply transaction with no transaction stack 12:19:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:55 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RWALK(r0, &(0x7f0000000000)={0x9}, 0x9) [ 268.281118] binder: 8100:8101 transaction failed 29201/-71, size 56-8 line 2741 [ 268.360703] binder: 8100:8101 got reply transaction with no transaction stack 12:19:55 executing program 3: socket$netlink(0x10, 0x3, 0x7) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket(0x10, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000a00)="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", 0x166, 0x2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r2, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x1000000000000030, 0x0) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r2, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000340)=0x80) poll(&(0x7f00000004c0)=[{r0, 0x2030}, {r4, 0x408}, {r2, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xfffffd44) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x1f, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) 12:19:55 executing program 1: socket$netlink(0x10, 0x3, 0x7) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket(0x10, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000a00)="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", 0x166, 0x2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r2, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x1000000000000030, 0x0) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r2, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000340)=0x80) poll(&(0x7f00000004c0)=[{r0, 0x2030}, {r4, 0x408}, {r2, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xfffffd44) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x1f, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) [ 268.404610] binder: 8100:8101 transaction failed 29201/-71, size 56-8 line 2741 [ 268.404853] binder: 8115:8120 ioctl c0306201 20000040 returned -14 12:19:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x0) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000001c0)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000180)) 12:19:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000440)=[@flat={0x77622a85, 0x10b}, @fda={0x66646185, 0x0, 0x0, 0x3d}], &(0x7f00000004c0)=[0x38]}}], 0x1, 0x0, &(0x7f00000000c0)="e1"}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) 12:19:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) 12:19:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004d00)={&(0x7f00000047c0), 0xc, &(0x7f0000004cc0)={&(0x7f0000004840)={0x14}, 0x14}}, 0x0) [ 268.617647] binder: 8133:8135 got reply transaction with no transaction stack [ 268.625411] binder: 8133:8135 transaction failed 29201/-71, size 56-8 line 2741 12:19:55 executing program 1: socket$netlink(0x10, 0x3, 0x7) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket(0x10, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000a00)="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", 0x166, 0x2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r2, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x1000000000000030, 0x0) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r2, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000340)=0x80) poll(&(0x7f00000004c0)=[{r0, 0x2030}, {r4, 0x408}, {r2, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xfffffd44) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x1f, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) 12:19:55 executing program 3: mknod(&(0x7f00000015c0)='./file0\x00', 0x8, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14}, 0x14) 12:19:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000002c0)) [ 268.704223] binder: 8144:8145 ioctl c0306201 20000040 returned -14 12:19:55 executing program 2: 12:19:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:56 executing program 5: 12:19:56 executing program 2: 12:19:56 executing program 1: socket$netlink(0x10, 0x3, 0x7) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket(0x10, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000a00)="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", 0x166, 0x2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r2, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x1000000000000030, 0x0) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r2, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000340)=0x80) poll(&(0x7f00000004c0)=[{r0, 0x2030}, {r4, 0x408}, {r2, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xfffffd44) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x1f, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) [ 268.888621] binder: 8167:8169 ioctl c0306201 20000040 returned -14 12:19:56 executing program 2: 12:19:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:56 executing program 3: 12:19:56 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000540)='yam0\x00') [ 269.068860] binder: 8186:8187 transaction failed 29189/-22, size 0-0 line 2834 12:19:56 executing program 1: 12:19:56 executing program 2: [ 269.118773] binder: undelivered TRANSACTION_ERROR: 29189 12:19:56 executing program 3: 12:19:56 executing program 2: 12:19:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:56 executing program 1: 12:19:56 executing program 0: 12:19:56 executing program 5: 12:19:56 executing program 5: 12:19:56 executing program 1: 12:19:56 executing program 3: 12:19:56 executing program 2: [ 269.675173] binder: 8207:8208 transaction failed 29189/-22, size 0-0 line 2834 [ 269.714061] binder: undelivered TRANSACTION_ERROR: 29189 12:19:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:57 executing program 0: 12:19:57 executing program 3: 12:19:57 executing program 5: 12:19:57 executing program 2: 12:19:57 executing program 1: [ 269.881975] binder: 8225:8228 transaction failed 29189/-22, size 0-0 line 2834 12:19:57 executing program 3: 12:19:57 executing program 0: [ 269.954191] binder: undelivered TRANSACTION_ERROR: 29189 12:19:57 executing program 2: 12:19:57 executing program 1: 12:19:57 executing program 5: 12:19:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:57 executing program 3: 12:19:57 executing program 1: 12:19:57 executing program 0: 12:19:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:57 executing program 5: 12:19:57 executing program 2: 12:19:57 executing program 1: 12:19:57 executing program 5: 12:19:57 executing program 0: 12:19:57 executing program 3: 12:19:57 executing program 2: 12:19:57 executing program 1: 12:19:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:57 executing program 3: 12:19:57 executing program 0: 12:19:57 executing program 5: 12:19:57 executing program 2: 12:19:57 executing program 0: 12:19:57 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:57 executing program 1: 12:19:57 executing program 2: 12:19:57 executing program 3: 12:19:57 executing program 5: [ 270.702043] binder: 8287:8288 ioctl c0306201 20000040 returned -14 12:19:57 executing program 0: 12:19:57 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x47f, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='cpuset,\x00', &(0x7f00000000c0)='system_u:object_r:mount_exec_t:s0\x00'], &(0x7f0000000280)) 12:19:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x0, 0x300) syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket(0x0, 0x0, 0x0) 12:19:58 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:58 executing program 5: 12:19:58 executing program 3: 12:19:58 executing program 0: [ 270.888168] binder: 8307:8308 ioctl c0306201 20000040 returned -14 12:19:58 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:58 executing program 5: 12:19:58 executing program 2: 12:19:58 executing program 3: 12:19:58 executing program 0: 12:19:58 executing program 1: [ 271.067419] binder: 8321:8324 ioctl c0306201 20000040 returned -14 12:19:58 executing program 2: 12:19:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:58 executing program 5: 12:19:58 executing program 3: 12:19:58 executing program 0: 12:19:58 executing program 1: 12:19:58 executing program 3: 12:19:58 executing program 5: 12:19:58 executing program 2: [ 271.311109] binder: 8342:8347 ioctl c0306201 20000040 returned -14 12:19:58 executing program 0: 12:19:58 executing program 1: 12:19:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:58 executing program 5: 12:19:58 executing program 3: 12:19:58 executing program 0: 12:19:58 executing program 2: [ 271.497761] binder: 8357:8358 ioctl c0306201 20000040 returned -14 12:19:58 executing program 1: 12:19:58 executing program 5: 12:19:58 executing program 3: 12:19:58 executing program 2: 12:19:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:58 executing program 0: 12:19:58 executing program 1: 12:19:58 executing program 5: [ 271.744410] binder: 8377:8378 ioctl c0306201 20000040 returned -14 12:19:59 executing program 2: 12:19:59 executing program 3: 12:19:59 executing program 0: 12:19:59 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:59 executing program 1: 12:19:59 executing program 2: 12:19:59 executing program 5: 12:19:59 executing program 3: 12:19:59 executing program 0: 12:19:59 executing program 1: [ 272.016421] binder: 8393:8400 ioctl c0306201 20000040 returned -14 12:19:59 executing program 2: 12:19:59 executing program 5: 12:19:59 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:59 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000740)=ANY=[], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000540)=0xc) 12:19:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @empty=[0x0, 0x0, 0x14], [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 12:19:59 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001ac0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49794de18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3ec4d2e8d443c82fc3435bed4de5d69409a781c863e0fd8a6f868925be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a441a2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0cf816930de3675d34117a44eb0e4f832936da44e63e1160af1acf45db1cdf4bcbbede795db798c61db61e23f") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) 12:19:59 executing program 2: socketpair$unix(0x1, 0x80400000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000810000), 0x3a) 12:19:59 executing program 5: socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000140)) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioctl$TCFLSH(0xffffffffffffffff, 0x5434, 0x0) [ 272.310278] binder: 8417:8427 ioctl c0306201 20000040 returned -14 12:19:59 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x8911, &(0x7f0000000340)) [ 272.459888] ¹á6›Íaï~IyMá‡ì: renamed from nr0 [ 272.519286] binder: 8447:8457 ioctl c0306201 20000040 returned -14 12:19:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x9) 12:19:59 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:19:59 executing program 0: socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, "73797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000700", 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xffffff05) read(r2, &(0x7f0000000080)=""/86, 0x56) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[]) 12:19:59 executing program 5: socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4, r2, 0x7fffff, &(0x7f0000000040)={&(0x7f0000002400)=""/4096, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) [ 272.667450] binder: 8465:8467 ioctl c0306201 20000040 returned -14 12:19:59 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) [ 272.754855] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.794081] binder: 8477:8478 ioctl c0306201 20000040 returned -14 [ 272.800641] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.826307] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.846902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.864021] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.884972] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.902690] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.915268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.922305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.936013] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.947545] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.958851] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.979363] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 272.986896] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 272.993813] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.009104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.024212] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 12:20:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}]) 12:20:00 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000a8aff8)=0x0) io_getevents(r1, 0x1, 0xffffff89, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 12:20:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) [ 273.031080] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.051804] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.069527] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.077295] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.084845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.091802] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.101363] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 12:20:00 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) 12:20:00 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:00 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000a8aff8)=0x0) io_getevents(r1, 0x1, 0xffffff89, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)}]) socket$inet_udp(0x2, 0x2, 0x0) 12:20:00 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000a8aff8)=0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_getevents(r1, 0x1, 0xffffff89, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)}]) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 12:20:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x2}) 12:20:00 executing program 1: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000140)) [ 273.274642] binder: 8506:8508 ioctl c0306201 20000040 returned -14 12:20:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2}, 0x1c) listen(r1, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 12:20:00 executing program 3: 12:20:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:00 executing program 2: 12:20:00 executing program 0: [ 273.413720] binder: 8526:8528 ioctl c0306201 20000040 returned -14 12:20:00 executing program 2: 12:20:00 executing program 3: 12:20:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:00 executing program 5: 12:20:00 executing program 0: 12:20:00 executing program 2: 12:20:00 executing program 3: [ 273.586038] binder: 8540:8541 ioctl c0306201 20000040 returned -14 12:20:01 executing program 5: 12:20:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:01 executing program 0: 12:20:01 executing program 3: 12:20:01 executing program 1: 12:20:01 executing program 2: 12:20:01 executing program 3: 12:20:01 executing program 5: 12:20:01 executing program 0: [ 274.312934] binder: 8557:8560 ioctl c0306201 20000040 returned -14 12:20:01 executing program 2: 12:20:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:01 executing program 1: 12:20:01 executing program 3: 12:20:01 executing program 0: 12:20:01 executing program 5: 12:20:01 executing program 2: [ 274.555815] binder: 8575:8577 ioctl c0306201 20000040 returned -14 12:20:01 executing program 1: 12:20:01 executing program 3: 12:20:01 executing program 2: 12:20:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:01 executing program 0: 12:20:01 executing program 5: 12:20:01 executing program 1: 12:20:02 executing program 3: 12:20:02 executing program 2: 12:20:02 executing program 0: [ 274.781573] binder: 8592:8595 ioctl c0306201 20000040 returned -14 12:20:02 executing program 5: 12:20:02 executing program 1: 12:20:02 executing program 3: 12:20:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:02 executing program 2: 12:20:02 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 12:20:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000740)={[{@fat=@nocase='nocase'}]}) 12:20:02 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)="73791c038c", 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000380)='./file1\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000009c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x166, &(0x7f00000006c0)}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000880)) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) openat$cgroup_procs(r1, &(0x7f0000000a80)="6367726f75702e70726f637300bcaf72258c68f64e1a8c0013a66cc589980124e7f9ce17f3c2fb58087cdd74b382d428bba17cecfd57f54aea1afbc6c6dbda89f3bdd4313f8603a4a2a869eec04d962cb448d32b6cd3579d9053b6492973c270", 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480), 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000002800)=""/88, 0x58}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) 12:20:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) [ 275.044406] binder: 8613:8615 ioctl c0306201 20000040 returned -14 [ 275.076778] FAT-fs (loop5): bogus number of reserved sectors 12:20:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488d") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:02 executing program 0: 12:20:02 executing program 2: [ 275.147674] FAT-fs (loop5): Can't find a valid FAT filesystem 12:20:02 executing program 3: [ 275.248707] binder: 8636:8637 ioctl c0306201 20000040 returned -14 [ 275.275921] FAT-fs (loop5): bogus number of reserved sectors [ 275.290261] FAT-fs (loop5): Can't find a valid FAT filesystem 12:20:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488d") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:02 executing program 0: add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz'}, &(0x7f00000006c0)="f7", 0x1, 0xfffffffffffffffc) 12:20:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1408170000000005000000ac14141a00000000e0000001ac14141de0000002331c0ecc92c322"], 0x1) 12:20:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./file0\x00', 0x400001, 0x0) 12:20:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000025c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000180)={0x2}, &(0x7f0000000080), &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) [ 275.494725] binder: 8651:8655 ioctl c0306201 20000040 returned -14 12:20:02 executing program 1: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)="73791c038c", 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000380)='./file1\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000009c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x166, &(0x7f00000006c0)}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000880)) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) openat$cgroup_procs(r1, &(0x7f0000000a80)="6367726f75702e70726f637300bcaf72258c68f64e1a8c0013a66cc589980124e7f9ce17f3c2fb58087cdd74b382d428bba17cecfd57f54aea1afbc6c6dbda89f3bdd4313f8603a4a2a869eec04d962cb448d32b6cd3579d9053b6492973c270", 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480), 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000002800)=""/88, 0x58}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) 12:20:02 executing program 3: add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="ae", 0x1, 0xfffffffffffffffb) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000200)={0x400, 0x9, 0x1, 0x9}) shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000002c0)=[0x0]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast1, @in6=@mcast1}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)) 12:20:02 executing program 0: clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x0) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000640)="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", 0x0) 12:20:02 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) [ 275.601978] audit: type=1326 audit(1540297202.789:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8661 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:02 executing program 0: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000640)="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", 0x0) 12:20:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000014c0), 0x1000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000480)) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getgroups(0x0, &(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) 12:20:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000400)) timer_getoverrun(0x0) 12:20:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 12:20:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) 12:20:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488d") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) [ 275.979034] binder: 8709:8710 ioctl c0306201 20000040 returned -14 12:20:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000100), 0x8, 0x0) 12:20:03 executing program 1: add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="ae", 0x1, 0xfffffffffffffffb) 12:20:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/162, 0x8a) 12:20:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d76") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:03 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000025c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) dup(0xffffffffffffffff) [ 276.287191] audit: type=1326 audit(1540297203.479:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8661 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:03 executing program 2: [ 276.368865] audit: type=1326 audit(1540297203.559:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8724 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 276.369550] binder: 8719:8720 ioctl c0306201 20000040 returned -14 12:20:03 executing program 1: 12:20:03 executing program 5: 12:20:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d76") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:03 executing program 2: 12:20:03 executing program 5: 12:20:03 executing program 1: 12:20:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) [ 276.609703] binder: 8743:8745 ioctl c0306201 20000040 returned -14 12:20:03 executing program 1: 12:20:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d76") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) [ 276.806925] binder: 8758:8760 ioctl c0306201 20000040 returned -14 12:20:04 executing program 5: 12:20:04 executing program 2: 12:20:04 executing program 1: 12:20:04 executing program 3: 12:20:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(r1) 12:20:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d7660") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) [ 277.169727] audit: type=1326 audit(1540297204.359:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8724 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:04 executing program 5: 12:20:04 executing program 1: 12:20:04 executing program 2: [ 277.273070] binder: 8769:8770 ioctl c0306201 20000040 returned -14 12:20:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(r1) 12:20:04 executing program 3: 12:20:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d7660") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:04 executing program 5: 12:20:04 executing program 2: 12:20:04 executing program 1: 12:20:04 executing program 2: 12:20:04 executing program 3: 12:20:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(r1) [ 277.550102] binder: 8789:8792 ioctl c0306201 20000040 returned -14 12:20:04 executing program 5: 12:20:04 executing program 1: 12:20:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d7660") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:04 executing program 2: 12:20:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) 12:20:04 executing program 3: 12:20:04 executing program 5: [ 277.745824] binder: 8806:8807 ioctl c0306201 20000040 returned -14 12:20:05 executing program 1: 12:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) 12:20:05 executing program 2: 12:20:05 executing program 5: 12:20:05 executing program 3: [ 277.958561] binder: 8821:8824 transaction failed 29189/-22, size 0-0 line 2834 12:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:05 executing program 1: 12:20:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000340)=@nfc, 0x2, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) shutdown(r1, 0x1) [ 277.998792] binder: undelivered TRANSACTION_ERROR: 29189 12:20:05 executing program 5: 12:20:05 executing program 3: 12:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) [ 278.134180] binder: 8837:8839 transaction failed 29189/-22, size 0-0 line 2834 12:20:05 executing program 1: [ 278.178169] binder: undelivered TRANSACTION_ERROR: 29189 12:20:05 executing program 3: 12:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) 12:20:05 executing program 5: 12:20:05 executing program 3: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000100)) 12:20:05 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x7f) 12:20:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) [ 278.438361] binder: 8857:8861 transaction failed 29189/-22, size 0-0 line 2834 [ 278.500975] binder: undelivered TRANSACTION_ERROR: 29189 12:20:05 executing program 2: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f0000000080)={0x77359400}) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) 12:20:05 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/80, 0x50}], 0x1, 0x0) 12:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw6\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 12:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) [ 278.656747] binder: 8878:8879 transaction failed 29189/-22, size 0-0 line 2834 [ 278.685225] binder: undelivered TRANSACTION_ERROR: 29189 12:20:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4f469eeadd8f49f7015aed4a9cc1160f197891c4edf0df07bdbd5677571097d8fbcd4e57a4088097b9b4b1d24deb7cbaa3234c100a45f484d604d65cc5931f8f", "b73b5683d0a5d7d755d8a51cb064d093f45cc07c98ea638ce1c0f04a40a8d858"}) 12:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:06 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 12:20:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/47, 0x2f) socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000003740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0xa, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r2, &(0x7f0000000340)=""/210) r5 = getpid() sched_getaffinity(r5, 0x8, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x904c48a8e9bc8f45}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000000}) sendto(r6, &(0x7f0000000000)="120000001200e7ef007b0000f4afd703", 0x10, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x408000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) syncfs(r0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000000)="12"}) getdents(r0, &(0x7f0000000040), 0x88) [ 278.842766] binder: 8897:8898 transaction failed 29189/-22, size 0-0 line 2834 [ 278.868535] binder: undelivered TRANSACTION_ERROR: 29189 [ 279.079866] IPVS: ftp: loaded support on port[0] = 21 12:20:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b19000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001bc0), 0x2, 0x0, 0x0) 12:20:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000003c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_getnetconf={0x14, 0x52, 0x601}, 0x14}}, 0x0) 12:20:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) [ 279.350045] binder: 8920:8929 transaction failed 29189/-22, size 0-0 line 2834 [ 279.438544] binder: undelivered TRANSACTION_ERROR: 29189 12:20:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 12:20:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:06 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:20:06 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)='|', 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0xfffffffffffffc00) [ 279.846735] IPVS: ftp: loaded support on port[0] = 21 12:20:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/47, 0x2f) socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000003740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0xa, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r2, &(0x7f0000000340)=""/210) r5 = getpid() sched_getaffinity(r5, 0x8, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x904c48a8e9bc8f45}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000000}) sendto(r6, &(0x7f0000000000)="120000001200e7ef007b0000f4afd703", 0x10, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x408000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) syncfs(r0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000000)="12"}) getdents(r0, &(0x7f0000000040), 0x88) 12:20:07 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)="002f0000638915e0df56ac591a298569506c490000") creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000036c0)={0x1, &(0x7f0000003700)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000600)="80f17a0b8c8970cad4e7c2198c830f262255157995a738328a6ea456e2363942b6223ced8e1d157847f0c1b27a6f790486384b94faefd0dfba2444691133054cc3c8e8e0c3448446a3c2b9f6f110a48d3902d829438729dc7496c17992daebf777fcec616e2ab5ee4386fc35ddb3c5be77d95c0fffaf93cd81c953d311d52830de1d0e9e0df27d08c3fd370198119340781d16aafdfe831593becee6a47cb0fc059d70333ded95e2eb745ff068798a7f26f16839020454432ad0db8fad8c6f345d112e5a6324307d28", 0xc9}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001200)=""/147, 0x93}], 0x1, &(0x7f0000001840)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) 12:20:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:07 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002b00)=""/185, 0xb9}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="6e65742f70736368656400f3b1477fe1ec9a7b07e8ba3382ef61110be665cfa17b592cb8f43c8f78b0ade0deac154e3a2765c4eec5ae55e58ffa898de1a4190a74a59515712be3c4ad58f61089c8f401eb7b1857f8219082b71781") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 12:20:07 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) close(r1) [ 280.007311] audit: type=1804 audit(1540297207.199:40): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir197264257/syzkaller.chujcM/87/bus" dev="sda1" ino=16713 res=1 12:20:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) close(r1) 12:20:07 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x35d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @local}, &(0x7f00000012c0)=0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001340)={{{@in6=@mcast2, @in6}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001440)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001d40), &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) sendmmsg$unix(r0, &(0x7f0000001e80), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000340)='/dev/loop-control\x00'], &(0x7f0000000780), 0x800) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000880)='syzkaller\x00', &(0x7f0000000680), &(0x7f0000000840)="93", 0xfffffffffffffff9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000000bc0)=""/229, 0xe5}], 0x4, 0x0) dup(0xffffffffffffffff) [ 280.131667] audit: type=1804 audit(1540297207.229:41): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir197264257/syzkaller.chujcM/87/bus" dev="sda1" ino=16713 res=1 12:20:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x200}) 12:20:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) close(r1) [ 280.255191] audit: type=1804 audit(1540297207.239:42): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir197264257/syzkaller.chujcM/87/bus" dev="sda1" ino=16713 res=1 [ 280.276411] IPVS: ftp: loaded support on port[0] = 21 12:20:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/47, 0x2f) socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000003740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0xa, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r2, &(0x7f0000000340)=""/210) r5 = getpid() sched_getaffinity(r5, 0x8, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x904c48a8e9bc8f45}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000000}) sendto(r6, &(0x7f0000000000)="120000001200e7ef007b0000f4afd703", 0x10, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x408000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) syncfs(r0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000000)="12"}) getdents(r0, &(0x7f0000000040), 0x88) 12:20:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000000080)}) 12:20:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00000002c0), 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x110, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x110}}, 0x0) 12:20:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:08 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) 12:20:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000000080)}) 12:20:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 12:20:08 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) 12:20:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000000080)}) [ 281.319736] IPVS: ftp: loaded support on port[0] = 21 12:20:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/47, 0x2f) socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000003740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0xa, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r2, &(0x7f0000000340)=""/210) r5 = getpid() sched_getaffinity(r5, 0x8, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x904c48a8e9bc8f45}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000000}) sendto(r6, &(0x7f0000000000)="120000001200e7ef007b0000f4afd703", 0x10, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x408000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) syncfs(r0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000000)="12"}) getdents(r0, &(0x7f0000000040), 0x88) 12:20:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) 12:20:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000100)}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000080)}) 12:20:09 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000380)=0x6e, 0x0) accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000b00), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000b80), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f00000035c0)=@getrule={0x14, 0x22, 0x401}, 0xb5}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000003c80)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001c0001040000000000a20000020000007e6d6cefb7759f87312f67ef72cfd3030ff0cb5792f3d50813b01ff050a5fee965a9fb6094f2b885b9b92b688e9ca6892315af7b17f1e2b502f489e039fc83e96e3eb42b43aae31f8a01318fbdd0d39ff917456c17ff0f893c0fd4ec620d34dff9dd312c22d59b702d3f8a9a0c6270bc8e03764fa0de60ef3c7c9da6f65d92814c08e5c3b874728dffac84dfdf0a052df23545df7118ee159f53b45816fe0ad940efae0923e7ff2d3841abc1"], 0x1}, 0x8}, 0x0) 12:20:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000080)}) 12:20:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000100)}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00000002c0), 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0) 12:20:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) 12:20:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000080)}) [ 282.278703] IPVS: ftp: loaded support on port[0] = 21 12:20:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000280)) 12:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000100)}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00000002c0), 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 12:20:10 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x80000006) 12:20:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000000080)}) [ 282.942259] binder: 9087:9088 unknown command 25361 12:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:10 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) [ 282.971334] binder: 9087:9088 ioctl c0306201 20000040 returned -22 12:20:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setresgid(0x0, 0x0, 0x0) 12:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0xffffffffffffffd1, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='*', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, 0x1c) 12:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x80000006) [ 283.176884] binder: 9109:9110 unknown command 25361 [ 283.181973] binder: 9109:9110 ioctl c0306201 20000040 returned -22 12:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:10 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000a00), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in=@remote}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getuid() write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000980)={0x18}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@remote}}}, &(0x7f0000000740)=0xe8) getuid() stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000900), 0x24, 0x0) 12:20:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:10 executing program 2: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) [ 283.404881] binder: 9129:9131 unknown command 25361 [ 283.412776] binder: 9129:9131 ioctl c0306201 20000040 returned -22 12:20:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0xfffffffffffffcf1) 12:20:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) [ 283.607363] binder: 9150:9151 unknown command 4743953 [ 283.636481] binder: 9150:9151 ioctl c0306201 20000040 returned -22 12:20:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80802, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x64e6) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x190, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x38, 0x0, 0xfffffffffffff000, 0x6, 0x20, 0x0, 0x9}, [{0x0, 0x0, 0x0, 0x3ff, 0x5, 0x0, 0x0, 0x5}], "", [[]]}, 0x158) dup3(r2, r0, 0x0) 12:20:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:11 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, &(0x7f00004abf1b)="ae", 0x1) clone(0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000)) 12:20:11 executing program 2: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) 12:20:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) [ 284.103560] binder: 9164:9169 unknown command 4743953 12:20:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:11 executing program 2: socket(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x80000006) [ 284.149771] binder: 9164:9169 ioctl c0306201 20000040 returned -22 12:20:11 executing program 1: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) 12:20:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000080)}) 12:20:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) shutdown(r0, 0x0) 12:20:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:11 executing program 2: r0 = socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x80000006) 12:20:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='\n']}) [ 284.391544] binder: 9187:9188 unknown command 4743953 12:20:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) [ 284.419311] binder: 9187:9188 ioctl c0306201 20000040 returned -22 12:20:11 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000500)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x7ffffffffffffff, &(0x7f0000000400)='eth1{\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x0) 12:20:11 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x11, r1) 12:20:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:11 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 12:20:11 executing program 1: 12:20:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:11 executing program 1: 12:20:11 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 12:20:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 12:20:12 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 12:20:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 12:20:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 12:20:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/7, 0x7) 12:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) 12:20:12 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/7, 0x7) 12:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) 12:20:12 executing program 2: 12:20:12 executing program 4: 12:20:12 executing program 5: 12:20:12 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:12 executing program 1: 12:20:12 executing program 2: 12:20:12 executing program 5: 12:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) 12:20:12 executing program 4: 12:20:12 executing program 1: 12:20:12 executing program 2: 12:20:12 executing program 4: 12:20:12 executing program 5: 12:20:12 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) 12:20:12 executing program 1: 12:20:12 executing program 5: 12:20:12 executing program 2: 12:20:12 executing program 4: 12:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) 12:20:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:13 executing program 5: 12:20:13 executing program 4: 12:20:13 executing program 1: 12:20:13 executing program 2: 12:20:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) 12:20:13 executing program 5: 12:20:13 executing program 1: 12:20:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:13 executing program 4: 12:20:13 executing program 2: 12:20:13 executing program 5: 12:20:13 executing program 1: 12:20:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) 12:20:13 executing program 4: 12:20:13 executing program 2: 12:20:13 executing program 5: 12:20:13 executing program 1: 12:20:13 executing program 4: 12:20:13 executing program 5: 12:20:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:13 executing program 0: 12:20:13 executing program 2: 12:20:13 executing program 1: 12:20:13 executing program 4: 12:20:13 executing program 5: 12:20:13 executing program 0: 12:20:13 executing program 2: 12:20:13 executing program 1: 12:20:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 12:20:14 executing program 4: 12:20:14 executing program 0: 12:20:14 executing program 5: 12:20:14 executing program 2: 12:20:14 executing program 1: 12:20:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:14 executing program 4: 12:20:14 executing program 5: 12:20:14 executing program 0: 12:20:14 executing program 2: 12:20:14 executing program 1: 12:20:14 executing program 4: 12:20:14 executing program 0: 12:20:14 executing program 5: 12:20:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:14 executing program 2: 12:20:14 executing program 1: 12:20:14 executing program 4: 12:20:14 executing program 0: 12:20:14 executing program 1: 12:20:14 executing program 5: 12:20:14 executing program 2: 12:20:14 executing program 4: 12:20:14 executing program 0: 12:20:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:14 executing program 2: 12:20:14 executing program 4: 12:20:14 executing program 1: 12:20:14 executing program 5: 12:20:14 executing program 0: 12:20:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:14 executing program 2: 12:20:15 executing program 5: 12:20:15 executing program 1: 12:20:15 executing program 4: 12:20:15 executing program 2: 12:20:15 executing program 0: 12:20:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:15 executing program 4: 12:20:15 executing program 1: 12:20:15 executing program 5: 12:20:15 executing program 0: 12:20:15 executing program 4: 12:20:15 executing program 2: 12:20:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:15 executing program 5: 12:20:15 executing program 1: 12:20:15 executing program 0: 12:20:15 executing program 4: 12:20:15 executing program 2: 12:20:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4), 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:15 executing program 5: 12:20:15 executing program 1: 12:20:15 executing program 4: 12:20:15 executing program 0: 12:20:15 executing program 2: 12:20:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4), 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:15 executing program 5: 12:20:15 executing program 0: 12:20:15 executing program 2: 12:20:15 executing program 1: 12:20:15 executing program 4: 12:20:15 executing program 5: 12:20:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4), 0x1c) listen(r2, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:16 executing program 0: 12:20:16 executing program 2: 12:20:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0)=0x80000001, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 12:20:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 12:20:16 executing program 5: 12:20:16 executing program 0: 12:20:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:16 executing program 5: 12:20:16 executing program 2: 12:20:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f00000004c0)="d4", 0x1, 0xfffffffffffffffc) 12:20:16 executing program 4: syslog(0x2, &(0x7f0000000080)=""/65, 0x41) 12:20:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="6664696e666f000b1bd4396d1271107ac48fed3d907fc1ae827c975de9ce736df00742efcbebdf27e7f646346811655a44be9d83503279705a78bc7b140ae6cadc7198a5db77947db47d1fac80f5c011caf897b04111d3627a6585") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) 12:20:16 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x66b}}) 12:20:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000200)}) 12:20:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) 12:20:16 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty=[0x74000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x9000000, @broadcast}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) 12:20:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0xffffffffffffffe3, 0x20000004, &(0x7f0000000080)={0xa, 0x200000000004e22, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x100000000000005}, 0x1c) 12:20:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)) 12:20:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000009a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) [ 289.915185] audit: type=1326 audit(1540297217.099:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9563 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:20:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_delete(0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x26b7e558) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/20, 0x14}, 0x100) 12:20:17 executing program 1: socket$inet6(0xa, 0x3, 0x38) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0a5c2d023c") r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000000c0)) waitid(0x1, r0, 0x0, 0x0, &(0x7f0000000100)) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x227) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x1000000000016) [ 290.034744] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:20:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:17 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/45) 12:20:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:17 executing program 5: r0 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x8000000000044000) io_setup(0x9, &(0x7f0000000400)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) truncate(&(0x7f0000000200)='./bus\x00', 0x0) 12:20:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrlimit(0x0, &(0x7f0000000140)) 12:20:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 290.628944] audit: type=1326 audit(1540297217.819:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9563 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:20:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4004ae8b, &(0x7f0000000000)) 12:20:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) [ 290.977781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.036772] IPv4: Oversized IP packet from 127.0.0.1 12:20:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="8b", 0x1}], 0x1) 12:20:18 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x29, 0x0) 12:20:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) dup3(r1, r0, 0x0) 12:20:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) [ 291.167779] IPv4: Oversized IP packet from 127.0.0.1 12:20:18 executing program 1: clone(0x0, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$apparmor_current(r0, &(0x7f00000001c0)=@profile={'permprofile ', "2c6367726f7570766d6e6574307365637572697479e600"}, 0x23) 12:20:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:20:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x0, "8fe949922d88ff90de5ccf96508dcc567122c9d108298c8e605e808c93b722025ea507b319f7bf69353b40b4e79a64808720f4083b855f3053707526cf6004f25edd7465c62af044a64eb874e7c54a75"}, 0xd8) close(r0) 12:20:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x110000, &(0x7f0000000880)) 12:20:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000340)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:20:18 executing program 5: 12:20:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040), 0x1c) close(r1) 12:20:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)) 12:20:18 executing program 0: creat(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') 12:20:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{&(0x7f0000007c40)=@ipx, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000007cc0)=""/4096, 0x1000}, {&(0x7f0000008cc0)=""/245, 0xf5}], 0x2, &(0x7f0000009040)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000009940)) sendto$inet6(r0, &(0x7f0000000100), 0x179, 0x8003, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xf9, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1c) 12:20:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)) [ 291.627709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getuid() r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@local, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 291.668527] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:20:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340)={0x3f, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 'none\x00'}, 0x2c) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x439) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xbda) 12:20:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040), 0x1c) close(r1) 12:20:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) 12:20:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) gettid() waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 12:20:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040), 0x1c) close(r1) 12:20:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001030100000800000000200000000800100002000c0001000500120000000000"], 0x24}}, 0x0) 12:20:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b19000000000000a1", 0x12, 0x0, 0x0, 0x0) 12:20:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 12:20:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)) [ 292.195641] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:20:19 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = inotify_init1(0x0) lstat(&(0x7f0000000f80)='./file0/file0\x00', &(0x7f0000000fc0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r2) 12:20:19 executing program 5: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) clone(0x1ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x1, 0x1380) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 12:20:19 executing program 0: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7}, 0x7) 12:20:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x0) 12:20:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') pread64(r0, &(0x7f00000000c0), 0x0, 0x0) 12:20:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e65da52953865598d97328c26811398a3be24729917a84259fd2a8aa81c02b333c1ab9cb2ecfd6f7b47ea171a12d4f08986fc488cca8a27fa200795b6db954ee", "5ad2a7de86afb5fd088233f50805bbef5326ece68a3e07cc9a4f2f7003f8cb215b6533c5144decf9428edd2b8bcf2273da90f25714bbc03db6ac4a8b5fca5876", "781424ea2c1a134cb1ee1bc72301def0ce25965e669e59b2528090f61ac6c9c6"}) 12:20:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)) 12:20:19 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x1ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x1380) r1 = dup2(r0, r0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x7) write$P9_RWALK(r1, &(0x7f0000000080)={0x9}, 0x9) 12:20:19 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) 12:20:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup(r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)) tkill(r1, 0x8001004000000016) 12:20:20 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x801, 0x37f) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}, 0x5c) 12:20:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1) 12:20:20 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0x5}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xc) [ 293.250167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.264070] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.287082] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 12:20:20 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0), 0xc) [ 293.314910] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.323408] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.337926] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 12:20:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0), 0x1000) 12:20:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xd8b}) 12:20:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f0000000500)="fe78459ad6deff1c9036ee4a9ba2cd69a1dd7bead22763b8477b8f34cc944cdcb1b86b838726681ada5dc4e396ef9cde809b1080055225fe4a2228ad6e80e4b32ae21d51f44b2ef76ee8848eb0833de7b84e9caec60669447891114255442eb645b6d2eb770cb0d13abf1b74b6f0ab9fa807b6d2", 0x74, 0x1ff}], 0x0, &(0x7f00000006c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 12:20:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000000), 0xfffffee3) ioctl$TCFLSH(r3, 0x540b, 0x0) 12:20:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000080), 0x8) [ 293.569581] FAT-fs (loop3): bogus number of reserved sectors [ 293.621743] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_pts(r0, 0x0) dup2(r1, r0) [ 293.717546] FAT-fs (loop3): bogus number of reserved sectors [ 293.740353] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:23 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/231, 0xe7}], 0x1) 12:20:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1aa7cb6c210eb891, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r0) 12:20:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {}, {}, @rumble}) 12:20:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="0000000000b21dbe0b8e091bebc902126d888407c53b84edf32a2d34bf2576f0a900") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x2000107c) 12:20:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r0) [ 296.562255] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.576965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.580238] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.583729] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.583751] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.583776] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 12:20:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) 12:20:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) [ 296.613425] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.650822] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 12:20:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000200)=""/188, 0xbc, 0x0) 12:20:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) [ 296.693783] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.721769] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.728940] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 12:20:23 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) [ 296.756018] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.762323] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.788018] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 12:20:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 296.816307] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.819812] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.823071] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.823094] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.823113] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.823132] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 296.868012] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 296.880631] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.918708] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 296.938888] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz1 12:20:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) request_key(&(0x7f0000000880)='syzkaller\x00', &(0x7f0000000680), &(0x7f0000000840)="93", 0xfffffffffffffff9) 12:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:24 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000011c0)=""/4096, 0x1000) 12:20:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xf, 0xffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x20008000) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x6) 12:20:24 executing program 4: r0 = memfd_create(&(0x7f0000000180)="6cdb7a6b0a39568854c81c91feb3a408fb437e62446be24d95e384278d0c55b9b72e1d81056910a12112f1c4adb6e38d8d99f555bc2327087d7b598de9efdb16b77a6369eec73fc79eb3048f5cafe6b9761f46e2d5fd82fde74296492b2f756d169887a06fd1df4e50c55967c18b92c11563d5c04fb2d3ef0c04b32d5e4fac10e712868828f525d1918cc6e9324f03c4b568acee2b9beb336d0299684fff8894fed1feae12d6ca714ff14df97c5ab967162d8a764ebd8eaaa23bb329", 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fstat(r0, &(0x7f0000002b00)) 12:20:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000)=0x8000002, 0x1) 12:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rt6_stats\x00') readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/3, 0x3}], 0x1) 12:20:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 12:20:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000380)) [ 297.161908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.177867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) [ 297.299766] binder: 9946:9950 ioctl c018620c 20000380 returned -1 12:20:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x17, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 12:20:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0xb, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 12:20:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xf, 0xffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x20008000) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:25 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1b) r1 = socket(0x17, 0x0, 0x7) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)="33f466782f0c646553777b972f639fa4b8456198198148d8abb5a755a2a9c284991cbff14ec2aa426cbc7ba14d9de7da33e9ece24f9ad78e24c603ba82e4eeb8290d645a8eae4bfcad5559030eff9cdaed0b474d20fcf1ec17f861a7f5947acff28e83acb96f9f69d4c8038ba8c9e0532083cf0c40c33a5d8e1a072aa59f69e9eb213eb08cde2021cbe96666f36eaceddc369aef672c31b7fa1f42c6ffc203af8cbd4eb51888c54d71eef220c4f405d8df247f49b17318f812524ed973caf7de79a17a1734d3d80eb3", 0xc9}], 0x1, &(0x7f0000001940)=ANY=[], 0x0, 0x4080}], 0x1, 0xc004) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x8, 0x7, 0xffff}, &(0x7f00000001c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@loopback, @dev={0xfe, 0x80, [], 0x1c}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd602]}, 0x2, 0x0, 0x0, 0x400, 0x100, 0x2, r3}) [ 298.141267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) 12:20:25 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x24020400) ioctl$int_out(r0, 0x5450, &(0x7f0000000140)) 12:20:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {0xf, 0xffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x20008000) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:20:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 12:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:25 executing program 2: 12:20:25 executing program 3: 12:20:25 executing program 2: 12:20:25 executing program 5: getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) [ 298.408459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.589990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.597694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:26 executing program 1: 12:20:26 executing program 3: 12:20:26 executing program 5: getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) 12:20:26 executing program 2: 12:20:26 executing program 4: 12:20:26 executing program 0: 12:20:26 executing program 3: 12:20:26 executing program 5: getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) 12:20:26 executing program 1: 12:20:26 executing program 2: 12:20:26 executing program 4: 12:20:26 executing program 2: 12:20:26 executing program 4: 12:20:26 executing program 3: 12:20:26 executing program 1: 12:20:26 executing program 4: 12:20:26 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0xd) sendmmsg$unix(r2, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x120}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) keyctl$search(0xa, 0x0, &(0x7f0000000200)='rxrpc\x00', &(0x7f0000000280)={'syz'}, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffc) open(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 12:20:26 executing program 2: 12:20:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:27 executing program 3: 12:20:27 executing program 4: 12:20:27 executing program 1: 12:20:27 executing program 2: 12:20:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:27 executing program 4: 12:20:27 executing program 3: 12:20:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:20:27 executing program 2: 12:20:27 executing program 1: 12:20:27 executing program 0: 12:20:27 executing program 4: 12:20:27 executing program 3: 12:20:27 executing program 2: 12:20:27 executing program 1: 12:20:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/145, 0x91) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) 12:20:27 executing program 2: 12:20:27 executing program 4: 12:20:27 executing program 1: 12:20:27 executing program 3: 12:20:27 executing program 0: 12:20:27 executing program 5: 12:20:28 executing program 3: 12:20:28 executing program 2: 12:20:28 executing program 5: 12:20:28 executing program 4: 12:20:28 executing program 1: 12:20:28 executing program 0: 12:20:28 executing program 2: 12:20:28 executing program 4: 12:20:28 executing program 5: 12:20:28 executing program 3: 12:20:28 executing program 1: 12:20:28 executing program 0: 12:20:28 executing program 2: 12:20:28 executing program 3: 12:20:28 executing program 5: 12:20:28 executing program 1: 12:20:28 executing program 4: 12:20:28 executing program 0: 12:20:28 executing program 2: 12:20:28 executing program 3: 12:20:28 executing program 1: 12:20:28 executing program 0: 12:20:28 executing program 4: 12:20:28 executing program 5: 12:20:28 executing program 2: 12:20:28 executing program 3: 12:20:28 executing program 0: 12:20:28 executing program 4: 12:20:28 executing program 1: 12:20:28 executing program 2: 12:20:28 executing program 5: 12:20:28 executing program 0: 12:20:28 executing program 3: 12:20:28 executing program 4: 12:20:28 executing program 2: 12:20:28 executing program 1: 12:20:28 executing program 0: 12:20:28 executing program 5: 12:20:29 executing program 4: 12:20:29 executing program 3: 12:20:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000040), 0x900000bf) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000080)='\x00') 12:20:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) 12:20:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000140), 0x4) 12:20:29 executing program 4: 12:20:29 executing program 3: 12:20:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/162, 0x8a) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 12:20:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086dd60225b7300448800fe800000000000000000000000000000fe8000000000000000000000000000aa0086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000000000000000000000000000000000"], &(0x7f0000000100)) 12:20:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100), 0x4) 12:20:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x3) 12:20:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000400)) timer_getoverrun(0x0) 12:20:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 12:20:29 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f000079df88)) msgsnd(0x0, &(0x7f0000000080)={0x3}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 12:20:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_tid_address(&(0x7f0000000080)) 12:20:29 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x4) 12:20:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:29 executing program 2: 12:20:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd60225b7300800000000000000000000000000000fe8000000000000008000000000000aa0420880b0000000300000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000e3f21f32428c139f3c77a7a0b242daf20545a85062ccc925796886c47b8fd01e401bf0fb090c88e82b5aa9d428abf49d02e4f96ce018338913b2cccbcc43002f92b9fd52055d524ca68f7ebc7c33fa74911f24b481d1abac266ffa885674d4404f4751b20b96bf644a10f6fd00f8971afde82aa5aa19f1f91c30c4b9dd11ee2e32ea9adf1efc2f5938e4e93d2489991c11c2b720f23a072d09641c21411efd1801df9b8e6484d71176cccb686c7ec9fa1cd6941baaf52254b53267fc28798de289b2a796f4aaa9e0b588b67cde10dc178799bbd5b85f5adda460b63d2c2df2d6262b7460e5e7cbc04744a8b4c3288f41c557"], &(0x7f0000000100)) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) 12:20:29 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43}, 0x43) 12:20:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:20:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/249, 0xf9) 12:20:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000240)) 12:20:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x9ee, &(0x7f0000001fd8)=@raw=[@jmp], &(0x7f0000003ff6)='GPL\x00', 0x0, 0x4e, &(0x7f0000000000)=""/195}, 0x18) 12:20:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) 12:20:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000bf) 12:20:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) 12:20:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 12:20:30 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000001040)="e302b886e80d18f23dfca554aaa54bbd0cf2fa39bfad5ad34fbcac659e266a3871e4e1ee511579851909413abaa72e7a9170e0086fe2a2fb331845a3e67e318246702735402b3b8f0c8de592f71c440e1821e736684dd33306fffacf09a7eaae064de3e6471de4a59ff0d94ff9cd55dc4c87fddb53706aa069b768ee863755409eed991ad3f68d6586421b83033593a24565bc19222d7e630100d32eb2de5a847a3e586f74a1a2a0e5058bf0a49d5e421a44239393e451f045b028a66d23d242b629f76f97b1458f7ae2c91545d59feea559c01c06b90850131256b8f18295771bc353e3790cc3c5b675243121840d26f9879e925d5452fb0f3c7bbd4dadb4d307a6df6678e498646e0a5a098bb308f6ffadfd2f41521f31", 0x118, 0x0, 0x0, 0x0) 12:20:30 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4205, r2, 0x1000000202, &(0x7f00000000c0)={&(0x7f0000002100)=""/4096, 0x1000}) 12:20:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(r1, &(0x7f00000002c0)=""/249, 0xf9) 12:20:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000100), 0x8, 0x0) 12:20:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 12:20:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup(0xffffffffffffffff) 12:20:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x10) sendmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f00000005c0)=@ax25={0x3, {"7075bb107774bb"}}, 0x80, &(0x7f0000000ac0)}}], 0x1, 0x880) 12:20:30 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 12:20:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:30 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='nodevtrusted[vboxnet0!}^\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 12:20:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4}, 0x0) close(r1) close(r0) 12:20:30 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 12:20:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0x0) 12:20:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x200, 0x56ed) sendto$inet6(r0, &(0x7f0000000340)="0403000001000000000000325700f7c21975c180f9e15c566b2b2ff0dac8897c6b11876d886b6609d8d207ccf83f257e55e86eb29406136fcfff050000d65331af00c7a6", 0x44, 0x0, &(0x7f0000000000)={0xa, 0x2000000000800, 0x6, @mcast2}, 0x1c) 12:20:30 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000000280)='./file0\x00', 0x103d, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680), &(0x7f0000000380)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) 12:20:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000009000000120000000000000000000000ffff0000000004f5ac38095b93f87f1f00000077a4dc60375d16fe3f1f869f707c"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @pic={0x0, 0x2947ea45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000140)=0x44) 12:20:30 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) 12:20:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 12:20:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0x0) 12:20:30 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x0) 12:20:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe791}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) 12:20:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0x0) 12:20:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340), 0x361, &(0x7f00000013c0)}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e6e65742f73797a308b09c3058a136e2d2db79bc303af8caddbbc1b47865b1c7cbbe71a4a259de470351d29e6", 0x1ff) close(r0) 12:20:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:31 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]}, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) 12:20:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[{0x10, 0x6}], 0x10}, 0xe000) 12:20:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KDSKBLED(r2, 0x4b65, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:20:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:31 executing program 4: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a0081aee4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/146, 0x92}], 0x2, &(0x7f00000007c0)=""/81, 0x51, 0x4}, 0x0) 12:20:31 executing program 2: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) 12:20:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$binfmt_script(r1, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x1000) 12:20:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev}}}}, &(0x7f0000000100)=0xb0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf9, 0x0, [{}, {}, {}, {0x0, 0xceab, 0x0, [], 0xfffffffffffffffe}]}}) 12:20:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:31 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000000)) 12:20:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x1) 12:20:31 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x600) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 12:20:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @random="01003a1e2410"}) 12:20:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x0, 0x0, 0x0, 0x0, 0x4d3, 0x48}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz'}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 304.777125] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 12:20:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) 12:20:32 executing program 0: clone(0x20022100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000300)='./file0\x00', 0x0, 0xaaaaaaaaaaaa96a, &(0x7f0000000100), 0x0, &(0x7f0000000100)) memfd_create(&(0x7f0000000000)="0000000080", 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0xfffffffffffffdcc) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) 12:20:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:32 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) open(&(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x0, 0x1000}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x0, 0xa0000000000000, 0x0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, &(0x7f0000000540)) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 12:20:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2cd) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet(r0, &(0x7f0000000180)="cc649bcf1524328e07f973a7f3f1244b780f48386978c155e78d31e6ccde14a3", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xd13) 12:20:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:32 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000012c0), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'%at\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x220) 12:20:32 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x2b, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 12:20:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x2e3}}, 0x0) 12:20:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdf8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{}, {{@in=@multicast2}, 0x0, @in=@remote}}, 0xe8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000880)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000007c0)='/dev/usbmon#\x00', 0x5, 0x2000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x7000, 0x6, 0x101, 0x9, 0x0, 0x4, 0x30081, 0x0, 0x1ff, 0x9000000000000, 0x100000001, 0x5, 0x81, 0xf35, 0x8000, 0x5, 0x80000000, 0x7, 0xb64b, 0x4, 0xfffffffffffffff8, 0xc2c, 0x6, 0x5, 0x800, 0x200, 0x1400000, 0xe8, 0xfffffffffffffff8, 0x7, 0x56, 0xfff, 0x3cb, 0x6c, 0x6, 0x9, 0x0, 0xfffffffffffffff8, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000300)=0x4) sendto$inet(r0, &(0x7f0000000700)="cc193cca6e80e9766d6179770b8a9a2b27d9864b5faa8564cded176a05a029dc3339e282680abf276994ddf4f93520ea9aaeddfbee0b46c68bbdab89ef4ef5683c687cc0fb46e79f6c61994c2edad2d3cfdbf88afd90538c1f0d37f5b8f35eb95aedd612b1d06e0f9ea93269454a80ffaea854b897c6c9e6c29c83f73a112cc80aa44e840b34ac101c72cb8fb67783f4a97d605188e6cb7cfe5acb647861d93404559b7739e7e8373b2a5500000000000000000000", 0xb5, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) pipe2(&(0x7f0000000280), 0x84800) perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x70, 0x20, 0x0, 0x1, 0x5, 0x0, 0x2, 0x0, 0x4, 0x1, 0x8, 0x2, 0x7, 0x5, 0x7ff, 0x3f, 0x0, 0x200, 0x4, 0x8, 0x200, 0x0, 0x4, 0x3, 0x2, 0x6, 0x100000000, 0x80000000, 0x8, 0x9db, 0x7, 0x9, 0x3f, 0x401, 0x6, 0x1, 0x7d, 0x0, 0x400000, 0x0, @perf_config_ext={0x1, 0x2f87}, 0x20028, 0x7, 0x7, 0x2, 0x8, 0x3, 0xb5}, 0xffffffffffffff9c, 0x8, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3448) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000840), 0x0, &(0x7f0000000800)={0x0, r3+10000000}, 0xffffffffffffff0f) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) ptrace$setregs(0x8, r4, 0x0, &(0x7f0000000500)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa44, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000540)="f7d7317b1dc5f950f52d23e0786e4d329fc289b931aa8588fd2888488fc4f8511de221a0cc2ea0c4f1ecba84b963618d02000000eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c857347a04f08ec7e869ff942ab61c85e8e8cbf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e009fdd87dddeb99debfde7c3efcc7baf69a3a2a64d9199cefc850772fe33a279e7ad4873f271158fe155", 0xc5) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) dup2(r5, r0) 12:20:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) [ 305.570448] kernel msg: ebtables bug: please report to author: entry offsets not in right order 12:20:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) close(r0) 12:20:32 executing program 0: r0 = memfd_create(&(0x7f0000000180)="6cdb7a6b0a39568854c81c91feb3a408fb437e62446be24d95e384278d0c55b9b72e1d81056910a12112f1c4adb6e38d8d99f555bc2327087d7b598de9efdb16b77a6369eec73fc79eb3048f5cafe6b9761f46e2d5fd82fde74296492b2f756d169887a06fd1df4e50c55967c18b92c11563d5c04fb2d3ef0c04b32d5e4fac10e712868828f525d1918cc6e9324f03c4b568acee2b9beb336d0299684fff8894fed1feae12d6ca714ff14df97c5ab967162d8a764ebd8eaaa23bb329", 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) fstat(r0, &(0x7f0000002b00)) [ 305.673581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdf8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{}, {{@in=@multicast2}, 0x0, @in=@remote}}, 0xe8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000880)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000007c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x7000, 0x6, 0x101, 0x9, 0x0, 0x4, 0x30081, 0x0, 0x1ff, 0x9000000000000, 0x100000001, 0x5, 0x81, 0xf35, 0x8000, 0x5, 0x80000000, 0x7, 0xb64b, 0x4, 0xfffffffffffffff8, 0xc2c, 0x6, 0x5, 0x800, 0x200, 0x1400000, 0xe8, 0xfffffffffffffff8, 0x7, 0x56, 0xfff, 0x3cb, 0x6c, 0x6, 0x9, 0x0, 0xfffffffffffffff8, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x230a, 0x800, 0x4e7, 0x3, 0x0, 0x4}, r2, 0x10, r3, 0x3) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000300)=0x4) sendto$inet(r0, &(0x7f0000000700)="cc193cca6e80e9766d6179770b8a9a2b27d9864b5faa8564cded176a05a029dc3339e282680abf276994ddf4f93520ea9aaeddfbee0b46c68bbdab89ef4ef5683c687cc0fb46e79f6c61994c2edad2d3cfdbf88afd90538c1f0d37f5b8f35eb95aedd612b1d06e0f9ea93269454a80ffaea854b897c6c9e6c29c83f73a112cc80aa44e840b34ac101c72cb8fb67783f4a97d605188e6cb7cfe5acb647861d93404559b7739e7e8373b2a5500000000000000000000", 0xb5, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) pipe2(&(0x7f0000000280), 0x84800) perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x70, 0x20, 0x0, 0x1, 0x5, 0x0, 0x2, 0x0, 0x4, 0x1, 0x8, 0x2, 0x7, 0x5, 0x7ff, 0x3f, 0x0, 0x200, 0x4, 0x8, 0x200, 0x0, 0x4, 0x3, 0x2, 0x6, 0x100000000, 0x80000000, 0x8, 0x9db, 0x7, 0x9, 0x3f, 0x401, 0x6, 0x1, 0x7d, 0x0, 0x400000, 0x0, @perf_config_ext={0x1, 0x2f87}, 0x20028, 0x7, 0x7, 0x2, 0x8, 0x3, 0xb5}, 0xffffffffffffff9c, 0x8, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3448) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000840), 0x0, &(0x7f0000000800)={0x0, r5+10000000}, 0xffffffffffffff0f) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)) ptrace(0x10, r6) ptrace$setregs(0x8, r6, 0x0, &(0x7f0000000500)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa44, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000540)="f7d7317b1dc5f950f52d23e0786e4d329fc289b931aa8588fd2888488fc4f8511de221a0cc2ea0c4f1ecba84b963618d02000000eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c857347a04f08ec7e869ff942ab61c85e8e8cbf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e009fdd87dddeb99debfde7c3efcc7baf69a3a2a64d9199cefc850772fe33a279e7ad4873f271158fe155", 0xc5) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) dup2(r7, r0) 12:20:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_emit_ethernet(0x7a, &(0x7f0000000140)={@remote, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '"[s', 0x44, 0x0, 0x0, @dev, @local, {[], @gre}}}}}, &(0x7f0000000100)) [ 305.719094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) [ 305.913095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:20:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:33 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xffe, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00), &(0x7f0000001ac0)) 12:20:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:33 executing program 2: socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0xb) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) tkill(r1, 0x16) connect$netlink(r4, &(0x7f0000000000)=@proc, 0xc) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000280)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x8000, 0x20, 0xffffffffffff651a, 0xcef6, "948f6b8b774f0eed88004e531c10c42241e36d11544b6ef695219ed1eab75166"}) 12:20:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r1, 0x3, 0x0, 0x8001) 12:20:33 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xffe, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00), &(0x7f0000001ac0)) 12:20:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 12:20:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x600) fcntl$setown(r0, 0x8, 0x0) 12:20:34 executing program 0: r0 = memfd_create(&(0x7f0000000180)="6cdb7a6b0a39568854c81c91feb3a408fb437e62446be24d95e384278d0c55b9b72e1d81056910a12112f1c4adb6e38d8d99f555bc2327087d7b598de9efdb16b77a6369eec73fc79eb3048f5cafe6b9761f46e2d5fd82fde74296492b2f756d169887a06fd1df4e50c55967c18b92c11563d5c04fb2d3ef0c04b32d5e4fac10e712868828f525d1918cc6e9324f03c4b568acee2b9beb336d0299684fff8894fed1feae12d6ca714ff14df97c5ab967162d8a764ebd8eaaa23bb329", 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) fstat(r0, &(0x7f0000002b00)) 12:20:34 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xffe, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00), &(0x7f0000001ac0)) 12:20:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:20:34 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:34 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0xffe, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00), &(0x7f0000001ac0)) 12:20:34 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000001c0)=0x1) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000240)=""/251, 0xfb}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x2000000229, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:20:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x100000003, 0x0) recvmmsg(r1, &(0x7f0000001cc0), 0x400000000000293, 0x0, &(0x7f0000000240)={0x77359400}) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x16, 0x201}, 0x14}}, 0x0) 12:20:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:36 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2e975afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 12:20:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = dup(r0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 12:20:36 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @void, @mpls={[], @ipv6={0x0, 0x4, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x40) 12:20:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) fcntl$setown(r0, 0x8, 0x0) 12:20:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000086104) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000180), 0x100000005) 12:20:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 12:20:36 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000005) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r2) [ 309.744739] syz-executor1 (10607) used greatest stack depth: 14592 bytes left 12:20:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x200000000003) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3ff, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000480)}}], 0x400000000000197, 0x22, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0), 0x4) 12:20:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6000600) 12:20:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_targets\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000000), 0xfc9) 12:20:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000580)="6f6f6d5f73636f72655f61646a009fc5720e384adb40f8bf6a31e8ce88025eb2f468545232f1891e7e6d19c96c475e6c136337f7247f3f393e62e82f3cdb6a3e3ad91004721815dc2910493cd03a0f18ec00c2778a3043f8a9ea61168ce643f5cbdc1cea609ce18edd8eaa1ff4afa35abf174d1affb18d505d3c9ee1425b79e6aee949db299bcba3576c74e9a9fcf8def05d0aa553161d6888c5eacfca35d22e93fd09902368710d9b3b83dd0f738012c68e7ed4efc73aee346375b203d5d529c9f12fea955f27fbb9a934ca9ef3fbc9d67ed5b77d42e52e86bfbb23b9f74eb3fe3f78cc585e16627a228aa4351074bbb7caa7ccde5fdcabf2b8c7b3d32624bb348109bbe3bf42286c6ebce9453c36248f29b01ac9e318a6d97a6b945aed96ade25ccb2c21130d762972f10045cc636772bfd475429fa58c38e4440fd356746489c85614173dd9cf2ac8c7b7cc18322f4a6d8c359314fd0227e3c9127ec310b7c7aecf4182337cfdba32bdc62de0455f78c7698d56d95c5f6cfbd878582e4e9b6491d5c1a1ba684c957746137bfdc8541fe1296807e8576e5de4") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, &(0x7f0000000000), 0x7ffd) sendfile(r0, r1, &(0x7f0000000080), 0x800) 12:20:37 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240), 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, 0x0) 12:20:37 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000003f80)={&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000003d80), 0x0, &(0x7f0000003e00)}, 0x0) 12:20:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x200000000003) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3ff, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000480)}}], 0x400000000000197, 0x22, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0), 0x4) 12:20:37 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:37 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000200)='./control\x00') [ 310.461227] syz-executor0 (10658): /proc/10658/oom_adj is deprecated, please use /proc/10658/oom_score_adj instead. 12:20:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(r0, 0x0) 12:20:37 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x5, &(0x7f0000000400)) 12:20:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 12:20:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000300)=""/111) 12:20:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) 12:20:37 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$netlink(r1, &(0x7f000000a1c0)={&(0x7f0000000040)=@proc, 0xc, &(0x7f000000a0c0), 0x0, &(0x7f000000a180)}, 0x0) [ 310.680516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:20:37 executing program 3: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000140)={@dev, @rand_addr, @remote}, 0xc) 12:20:37 executing program 0: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x801, 0x37f) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) 12:20:37 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@ipv4={[], [], @broadcast}, @remote, @ipv4={[], [], @multicast1}, 0x0, 0xd0, 0x0, 0x500, 0x0, 0x880204}) getsockopt$inet_int(r1, 0x0, 0x1c, &(0x7f0000000100), &(0x7f00000002c0)=0x1) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x3) r2 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendto$unix(0xffffffffffffffff, &(0x7f00000003c0)="4bd4101ca900779372dbf3ef52f5545ac59b26265052bf4f0cfbc69f2b7f03282460666a8f6c8a3abb85cf85", 0x2c, 0x0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f00000000c0)=""/59, &(0x7f0000000040)=0x3b) 12:20:38 executing program 2: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x801, 0x37f) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom(r1, &(0x7f0000000100)=""/86, 0x56, 0x0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 12:20:38 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:38 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$netlink(r1, &(0x7f000000a1c0)={&(0x7f0000000040)=@proc, 0xc, &(0x7f000000a0c0), 0x0, &(0x7f000000a180)}, 0x0) 12:20:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7}, 0x7) 12:20:38 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendto$unix(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)=@abs, 0x6e) 12:20:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) 12:20:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$P9_RWALK(r0, &(0x7f0000002000)={0x9}, 0x9) 12:20:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0x21e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) 12:20:38 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$netlink(r1, &(0x7f000000a1c0)={&(0x7f0000000040)=@proc, 0xc, &(0x7f000000a0c0), 0x0, &(0x7f000000a180)}, 0x0) 12:20:38 executing program 1: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$apparmor_current(r0, &(0x7f00000001c0)=@profile={'permprofile ', "2c6367726f7570766d6e6574307365637572697479e600"}, 0x23) 12:20:38 executing program 2: 12:20:38 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$netlink(r1, &(0x7f000000a1c0)={&(0x7f0000000040)=@proc, 0xc, &(0x7f000000a0c0), 0x0, &(0x7f000000a180)}, 0x0) 12:20:38 executing program 2: 12:20:39 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:39 executing program 4: 12:20:39 executing program 2: 12:20:39 executing program 2: 12:20:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCSFF(r2, 0x40304580, 0xfffffffffffffffd) 12:20:39 executing program 3: [ 312.527514] audit: type=1400 audit(1540297239.719:45): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10777 comm="syz-executor1" 12:20:41 executing program 0: 12:20:41 executing program 2: 12:20:41 executing program 4: 12:20:41 executing program 3: 12:20:41 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:41 executing program 1: 12:20:41 executing program 1: 12:20:41 executing program 4: 12:20:41 executing program 2: 12:20:41 executing program 3: 12:20:41 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43}, 0x43) getdents64(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:41 executing program 0: 12:20:41 executing program 2: 12:20:41 executing program 4: 12:20:41 executing program 1: 12:20:41 executing program 3: 12:20:41 executing program 0: 12:20:42 executing program 1: 12:20:42 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:42 executing program 4: 12:20:42 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380), 0x4) sendto$inet(r1, &(0x7f0000000580)="54bccc17", 0x4, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) 12:20:42 executing program 3: 12:20:42 executing program 0: 12:20:42 executing program 1: 12:20:42 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:42 executing program 4: 12:20:42 executing program 3: 12:20:42 executing program 1: 12:20:42 executing program 0: 12:20:42 executing program 2: 12:20:42 executing program 1: 12:20:42 executing program 3: 12:20:42 executing program 4: 12:20:42 executing program 0: 12:20:42 executing program 2: 12:20:42 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:42 executing program 4: 12:20:42 executing program 1: 12:20:42 executing program 0: 12:20:42 executing program 3: 12:20:42 executing program 2: 12:20:42 executing program 4: 12:20:42 executing program 1: 12:20:42 executing program 0: 12:20:42 executing program 2: 12:20:42 executing program 3: 12:20:42 executing program 4: 12:20:43 executing program 0: 12:20:43 executing program 1: 12:20:43 executing program 3: 12:20:43 executing program 4: 12:20:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43}, 0x43) getdents64(r0, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:43 executing program 2: 12:20:43 executing program 0: 12:20:43 executing program 3: 12:20:43 executing program 2: 12:20:43 executing program 4: 12:20:43 executing program 1: 12:20:43 executing program 3: 12:20:43 executing program 4: 12:20:43 executing program 0: 12:20:43 executing program 2: 12:20:43 executing program 1: 12:20:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:43 executing program 4: 12:20:43 executing program 3: 12:20:43 executing program 0: 12:20:43 executing program 2: 12:20:43 executing program 1: 12:20:43 executing program 0: 12:20:43 executing program 4: 12:20:43 executing program 1: 12:20:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000040)=""/130) 12:20:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:20:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4f469eeadd8f49f7015aed4a9cc1160f197891c4edf0df07bdbd5677571097d8fbcd4e57a4088097b9b4b1d24deb7cbaa3234c100a45f484d604d65cc5931f8f", "b73b5683d0a5d7d755d8a51cb064d093f45cc07c98ea638ce1c0f04a40a8d858"}) 12:20:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:44 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 12:20:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 12:20:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x80045440, &(0x7f0000000000)) 12:20:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x1a0}]) 12:20:44 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) 12:20:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000000)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 317.308114] loop1: p1 p2 p3 p4 < > [ 317.308174] loop4: p1 p2 p3 p4 < > [ 317.325732] loop4: partition table partially beyond EOD, truncated [ 317.350773] loop4: p1 start 1 is beyond EOD, truncated 12:20:44 executing program 0: mkdir(&(0x7f0000000040)='./control\x00', 0x0) open(&(0x7f0000000280)='./control\x00', 0xc40be92474dfd22a, 0x0) 12:20:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/208) [ 317.371707] loop4: p2 start 101 is beyond EOD, truncated [ 317.396946] loop4: p3 start 201 is beyond EOD, truncated [ 317.434966] loop4: p4 start 301 is beyond EOD, truncated 12:20:44 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x40000000001}, 0x20) [ 317.587055] loop4: p1 p2 p3 p4 < > [ 317.590848] loop4: partition table partially beyond EOD, truncated [ 317.617836] loop1: p1 p2 p3 p4 < > [ 317.622504] loop4: p1 start 1 is beyond EOD, truncated 12:20:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = memfd_create(&(0x7f0000000900)="73970ddb08df8c656c667b7070703070707031236d643573756d00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000180)='&', 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x80000004) 12:20:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000380)=""/46, 0x359) [ 317.632462] loop4: p2 start 101 is beyond EOD, truncated [ 317.653379] loop4: p3 start 201 is beyond EOD, truncated [ 317.672656] loop4: p4 start 301 is beyond EOD, truncated 12:20:45 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) getdents64(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffd13) 12:20:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/172) 12:20:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xb1) 12:20:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 12:20:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x8000, &(0x7f0000000740)) 12:20:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x0) 12:20:45 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0x5}, 0x120) 12:20:45 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)) 12:20:45 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 318.178565] loop4: p1 p2 p3 p4 < > [ 318.182835] loop4: partition table partially beyond EOD, truncated [ 318.208506] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 318.215246] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 318.234607] loop4: p1 start 1 is beyond EOD, truncated [ 318.251457] loop4: p2 start 101 is beyond EOD, truncated [ 318.264180] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 318.276214] loop4: p3 start 201 is beyond EOD, truncated 12:20:45 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00000001c0)) timer_settime(0x0, 0x100000001, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) [ 318.288653] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 318.298895] loop4: p4 start 301 is beyond EOD, truncated [ 318.312518] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 318.325370] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 12:20:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime'}}]}) 12:20:45 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 318.530725] FAT-fs (loop3): bogus number of reserved sectors [ 318.575608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 318.628001] FAT-fs (loop3): bogus number of reserved sectors [ 318.633996] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:46 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xffffffb1) fallocate(r0, 0x10, 0x0, 0x10001) 12:20:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 12:20:46 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x1}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 12:20:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime'}}]}) 12:20:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)) 12:20:46 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/172) [ 319.036322] FAT-fs (loop3): bogus number of reserved sectors [ 319.067431] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:46 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xffffffb1) fallocate(r0, 0x3, 0x0, 0xfff9) [ 319.113460] loop4: p1 p2 p3 p4 < > [ 319.117425] loop4: partition table partially beyond EOD, truncated [ 319.138801] loop4: p1 start 1 is beyond EOD, truncated [ 319.171834] loop4: p2 start 101 is beyond EOD, truncated 12:20:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x20000000004e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) chmod(&(0x7f0000000180)='./file0\x00', 0x1be) getpid() socket(0x7, 0x805, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000002c0)={0x0, 0xffffffffffffffe1, 0x5, &(0x7f0000000280)="c216c7f189"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={"6c6f0000002400000000000008000011", 0xff}) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @broadcast}, 0x6}}}, 0x88) sendto$inet6(r3, &(0x7f00000000c0), 0x34debf3, 0x0, 0x0, 0x0) 12:20:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime'}}]}) [ 319.198374] loop4: p3 start 201 is beyond EOD, truncated [ 319.222540] loop4: p4 start 301 is beyond EOD, truncated 12:20:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 319.338267] FAT-fs (loop3): bogus number of reserved sectors [ 319.376509] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime'}}]}) [ 319.576295] loop4: p1 p2 p3 p4 < > [ 319.580180] loop4: partition table partially beyond EOD, truncated [ 319.603672] FAT-fs (loop3): bogus number of reserved sectors [ 319.610327] loop4: p1 start 1 is beyond EOD, truncated [ 319.624936] loop4: p2 start 101 is beyond EOD, truncated [ 319.638823] FAT-fs (loop3): Can't find a valid FAT filesystem [ 319.646071] loop4: p3 start 201 is beyond EOD, truncated [ 319.662234] loop4: p4 start 301 is beyond EOD, truncated 12:20:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)) [ 319.955857] FAT-fs (loop3): bogus number of reserved sectors [ 319.985783] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 12:20:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)) [ 320.355593] FAT-fs (loop3): bogus number of reserved sectors [ 320.388941] FAT-fs (loop3): Can't find a valid FAT filesystem [ 320.427254] loop2: p1 p2 p3 p4 < > 12:20:47 executing program 1: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000000)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 12:20:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x541f, &(0x7f00003b9fdc)) 12:20:47 executing program 5: socketpair$unix(0x1, 0x2000080000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043b4d43fadc5e4a25bae311b3a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x7ffd, 0x8001) fallocate(r1, 0x10, 0x5e89, 0xfff3) 12:20:47 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/39, 0x27, 0x40000041, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 12:20:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000000)) 12:20:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x541f, &(0x7f00003b9fdc)) [ 320.656914] FAT-fs (loop3): bogus number of reserved sectors [ 320.666765] loop2: p1 p2 p3 p4 < > [ 320.675380] FAT-fs (loop3): Can't find a valid FAT filesystem 12:20:47 executing program 5: socketpair$unix(0x1, 0x2000080000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043b4d43fadc5e4a25bae311b3a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x7ffd, 0x8001) fallocate(r1, 0x10, 0x5e89, 0xfff3) 12:20:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="0000000000b21dbe0b8e091bebc902126d888407c53b84edf32a2d34bf2576f0a900") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 12:20:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000001fd8)=@raw, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 12:20:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth1_to_bridge\x00'}, 0x18) 12:20:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x541f, &(0x7f00003b9fdc)) [ 320.936574] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 12:20:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 12:20:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001010100000800000000200000000800100002000c0001000500120000000000"], 0x24}}, 0x0) 12:20:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0xa, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 12:20:48 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0xf, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 12:20:48 executing program 5: clone(0x808289ff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getgid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) 12:20:48 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) preadv(0xffffffffffffffff, &(0x7f0000002900), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x141000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) 12:20:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x600) getcwd(&(0x7f0000000440)=""/69, 0x1d) 12:20:48 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 1: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)) setpgid(r0, 0x0) 12:20:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x401) 12:20:48 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0x0) 12:20:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000000), 0xfffffee3) ioctl$TCFLSH(r3, 0x540b, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) 12:20:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee01]) 12:20:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x2) 12:20:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() ioctl$TIOCCONS(r1, 0x541d) 12:20:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000200)) 12:20:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x600) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 12:20:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000600)="cd", 0x1) 12:20:49 executing program 2: 12:20:49 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x541f, &(0x7f00003b9fdc)) 12:20:49 executing program 3: 12:20:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000)=0x8000002, 0x1) 12:20:49 executing program 5: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:20:49 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) 12:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x1000) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000f40)={"2841c9d3959d07ad56ba6788696e15e32fab7577f73d459315084c39cb1c2db51f183a609571021ec0478bc79e825ad845b9e80182bebf9ab6b8782755f07baec328e11c29a24c3e258c3c6c0e95004e34d684e96479956c50a02193d7d847d6d9293955e26e08586d69f1652e343f55a288195af9c12f6cd0d2998c8455d5c2808f5c1f0487ea5ea4d8ca5cd697f2e37f8a6e893d32ff7af63a425b94850a29fda3def2e026ecb35cd431f6bed56bc8e4e52d800e8a9cf550486906968b0f65f3dd8bc3a3cd7c5fe9c20f969a5bb7886d628253a4b89ff4f68c340cf78b7eeae8247bed4da8a0a0a3b35d04ad6c8c1a8241deb56eaf0e35603e352ac3973317365fc13243c6fd0cfbac48116860d8488fe99f8f03668743d16a7e812332fa501322a96ebc4e501e62dd352f22100b7df1536205504765141c55f9e6db1f85261fff35ca7db71083872182e36f920082cca8db03c5a3e25f224b786bd1b4897981b0246cfff994e96d3e322735d6d8c63a7babfb1b274eb424a4e63434777d4cd4c925ef0db1ac317e6ebe4953280e26cec3827d11d8b1342ab7bede97aa46b5dd70a1983975371e8d164dfbb15b02759ae489f27862519f623180d9b32cb3013f6e3f1e3c99ac1f2948b576b154c9d444e6efd81449ff0a0cbcaff6170903a96085f4adb8a01ce9f6c78ba4517fcd9f2dffc382fbd16d378471568212b225ff5762ddafa24db3a67bbea9911283b875670a495676260793e0c66a4aa3a081a0794eec3b68a3c7bf3e19ceb2c099d415083c68c8579c7e4a9b7a24d5ff4f776bc2ccf65dbc4206fbaa91b8b29991a42b03329b72c53f2760e6d5a5c79d173e28c4957b719bcd5139198ad4e1d9e697b924f7281ba9448caaf1b977fe43628bf8df74dc416c1d460efbaf6c84b68e50c306bdcba7adcc4b62eaf695133aced6d14fafdfab1f5e17d7c16724cc7498f97b8c615a0511cee187bfafaa24d4f831dc9fd3396c6081babf095496ae0df382568a59c838e06b057cf2c2d439cc9d5d6acfa106f360fea8a3e2d718858d09ec83cdce0e31dfb71b12243922202a5ca8ca420cf1a4a9e784ca0bb56815587d7a0ae485e2eb3a3f4303eee4c53f1d21e8ac53f3cdec24f385f056ef5c05a65b29ef03fba291f40898be4b7325c63e3f83bc3a6e2ab571f73d22fdf97fd1428c69faaca082650ccb786739e0bc7c4acda9da8ac565df39c34b230c2fe70d27755fce1264257ed8221123a3980bf714d437abdcce65e469f963ef8727e8990e4fe07c4b417a2c89d2326264f59647a43cb56fc23b87495ebe4fd3846cd905a63b51a37a2ab3a54f01bd392239d2f581fe117b2cb0cd59ffa5b74ec5f2d6dffbacbf6c584ace5594af36de64ef88ca268a3f5620af49d5ea8c9d83ebb10c2762daade50ee61e18cb1233d25aa1b5b030d4bfca"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000003c00)=ANY=[@ANYBLOB="0000180014000100ff020000000000000000000000000001"], 0x1}}, 0x0) 12:20:49 executing program 1: r0 = gettid() clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_nanosleep(0xb, 0x0, &(0x7f0000000140)={0x0, r1+30000000}, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f0000000040), &(0x7f00000003c0)}}, &(0x7f0000044000)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) tkill(r0, 0x1004000000016) 12:20:49 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x0, 0x8000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:20:49 executing program 2: clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f0000000200)) ioprio_set$pid(0x2, 0x0, 0x0) 12:20:49 executing program 3: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000180)) ptrace(0x10, r1) ptrace$poke(0x4209, 0x0, &(0x7f0000000040), 0x0) 12:20:49 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40001) write$nbd(r0, &(0x7f0000000100)={0x67446698, 0xfffffff2}, 0x10) 12:20:49 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "3beb84e79a760c4095303421a72cf4633f12e018587227350d0ff7851dcf00f3337ecff75433f8cf148e1feabac5e88e7be197ff71c325ff3872de2d9b1287", 0x3e}, 0x60) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "62957e52490df0e515b10322cf64068a5d2d20b245f5d7d1e8137e1337ea4e5a4beb86755bf1abfad6f7a47e9a784df49f8903179b447520df508e349340c6"}, 0x60) 12:20:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) pipe2(&(0x7f0000000300), 0x0) 12:20:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x4b564d01, 0x3]}) 12:20:50 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x2000000, 0x300000000000000, 0x34000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460904050907000000000000000300070007000000f8010000000000004000000000000000a303000000000000880000000500380001007f00010401000000000001000080030000000200000000000000ff7f0000000000000100000000000000e1ffffffffffffff0000000004000000aa0900000000000000000000000000000000000000000000090000000000000004000000000000000000000000050800b2b8e7c0207f8c15435c5f65b824f94833ce5a469e19cefe3db700dc0aba3b189fc1cba86b252746cf2a9f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff4000000000000000000000000000000000000000000000000ff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x7ae) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e5384276411cab760f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f7632bd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 12:20:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xe3e, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="584653425640c4c743ea81642b859ed9d03d0bdf85d6a8ae0cdc7373794aee174eedfd9a5e0d6181c185dfdb35dcbb502071e6e4a8786a34f8e0fd6e5db8f1dadc71af8233ddc4bc46c251745685e801ed87fa7bd22c6c06766ddbd1177c575510ac89033e458a0b", 0x68}], 0x0, &(0x7f00000000c0)) 12:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x9e]}) 12:20:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 323.067863] attempt to access beyond end of device [ 323.088407] loop3: rw=4096, want=70, limit=7 [ 323.100733] XFS (loop3): SB validate failed with error -5. 12:20:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[]) 12:20:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@logbufs={'logbufs', 0x3d, 0x2}}]}) 12:20:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x24020400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/4096) 12:20:50 executing program 5: syz_mount_image$btrfs(&(0x7f0000000200)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 12:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x40000108]}) 12:20:50 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) [ 323.676720] XFS (loop2): Invalid superblock magic number 12:20:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xffffffa5}) 12:20:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000000), 0x0) [ 323.857289] dccp_close: ABORT with 3932 bytes unread 12:20:51 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "3beb84e79a760c4095303421a72cf4633f12e018587227350d0ff7851dcf00f3337ecff75433f8cf148e1feabac5e88e7be197ff71c325ff3872de2d9b1287", 0x3e}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100), 0x4) 12:20:51 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r0, &(0x7f00000000c0)=@un=@abs, 0x80) 12:20:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000000)='./file1\x00') stat(&(0x7f0000000140)='./file1/file0/file0\x00', &(0x7f0000000180)) 12:20:51 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@biosize={'biosize', 0x3d, 0xc0ed0000}}]}) 12:20:51 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x2000000, 0x300000000000000, 0x34000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x7ae) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e5384276411cab760f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f7632bd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 12:20:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x277, 0x3]}) 12:20:51 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x2000000, 0x300000000000000, 0x34000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x7ae) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e5384276411cab760f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f7632bd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 12:20:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@biosize={'biosize', 0x3d, 0x22000000}}]}) 12:20:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 12:20:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) [ 324.309880] binder: 11516:11516 unknown command 536872576 [ 324.349522] binder: 11516:11516 ioctl c0306201 20008fd0 returned -22 12:20:51 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x105100, 0x0) [ 324.407892] XFS (loop2): Invalid superblock magic number [ 324.414570] binder: 11534:11538 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 12:20:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:51 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f0000000100)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x1009020, &(0x7f00000001c0)='\x00') 12:20:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xe3e, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="584653425640c4c743ea81642b859ed9d03d0bdf85d6a8ae0cdc7373794aee174eedfd9a5e0d6181c185dfdb35dcbb502071e6e4a8786a34f8e0fd6e5db8f1dadc71af8233ddc4bc46c251745685e801ed87fa7bd22c6c06766ddbd1177c575510ac89033e458a", 0x67}], 0x0, &(0x7f00000000c0)) 12:20:51 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) sync() [ 325.056469] attempt to access beyond end of device [ 325.075729] loop2: rw=4096, want=69, limit=7 [ 325.087888] XFS (loop2): SB validate failed with error -5. 12:20:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000002640)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)=""/189, 0xbd}], 0x2) 12:20:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) [ 325.396097] dccp_close: ABORT with 1966 bytes unread 12:20:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x37}) 12:20:52 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497806a44bbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) socket$kcm(0x11, 0x2, 0x300) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 12:20:52 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x3) 12:20:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x0) close(r0) 12:20:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80) 12:20:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x1d9, 0x3]}) 12:20:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:52 executing program 0: [ 325.635676] device nr0 entered promiscuous mode 12:20:52 executing program 2: [ 325.703310] kvm [11608]: vcpu0, guest rIP: 0xfff0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x3, nop 12:20:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000002640)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)=""/189, 0xbd}], 0x2) 12:20:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:53 executing program 0: 12:20:53 executing program 5: 12:20:53 executing program 2: 12:20:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:53 executing program 3: 12:20:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x1d9]}) 12:20:53 executing program 2: 12:20:53 executing program 3: 12:20:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:53 executing program 5: 12:20:54 executing program 4: 12:20:54 executing program 3: 12:20:54 executing program 0: 12:20:54 executing program 2: 12:20:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:54 executing program 5: 12:20:54 executing program 2: 12:20:54 executing program 5: 12:20:54 executing program 3: 12:20:54 executing program 0: 12:20:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:54 executing program 4: 12:20:54 executing program 5: 12:20:54 executing program 2: 12:20:54 executing program 0: 12:20:54 executing program 3: 12:20:54 executing program 4: 12:20:54 executing program 5: 12:20:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:54 executing program 2: 12:20:54 executing program 4: 12:20:54 executing program 3: 12:20:54 executing program 0: 12:20:54 executing program 5: 12:20:54 executing program 2: 12:20:54 executing program 4: 12:20:54 executing program 3: 12:20:54 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:54 executing program 0: 12:20:54 executing program 2: 12:20:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000002c0), 0x4) 12:20:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fchmod(r2, 0x2071bbc47a32294c) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x24, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 'cgroup'}}, 0x24) 12:20:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe00e8addabd9a4c53a2b112ff000000078a", 0x27) 12:20:55 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="24000000200025eaa87865f51ef6bce90204000200bff20182a9000c0800010000180ec3", 0x24) 12:20:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x890b, &(0x7f0000000140)={"69666230020000000200", @ifru_map}) 12:20:55 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="24000000200025eaa87865f51ef6bce90204000200bff20182a9000c0800010000180ec3", 0x24) 12:20:55 executing program 0: r0 = socket$packet(0x11, 0x10000000003, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x6697, 0x5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x616) 12:20:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:55 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffe97) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "72563070be96c8f13e56f3afc7da3de3"}, 0x11, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) 12:20:55 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000140)={0x0, 0x0, 0x80000000}) 12:20:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:55 executing program 3: r0 = socket(0x20002000000010, 0x802, 0x0) r1 = dup(r0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) write(r1, &(0x7f0000000440)="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", 0xfc) 12:20:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0xb4) 12:20:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:20:55 executing program 3: r0 = socket$kcm(0xa, 0x20000000000005, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000940)=""/160, 0xa0}], 0x7, &(0x7f0000000ac0)=""/201, 0xc9}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000dc0), 0x4) 12:20:55 executing program 5: r0 = socket$kcm(0xa, 0x20000000000005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/174, 0xae}], 0x3, &(0x7f0000000ac0)=""/201, 0xc9, 0x5}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000020c0)}], 0x1, &(0x7f0000002380), 0x0, 0x8800}, 0x4c084) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000100)}, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000e40)) 12:20:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:55 executing program 4: r0 = socket$kcm(0xa, 0x20000000000005, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000940)=""/160, 0xa0}], 0x4, &(0x7f0000000ac0)=""/201, 0xc9, 0x5}, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x50, &(0x7f0000000bc0)}, 0x10) 12:20:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip_vti0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@local, 0x0, r2}) 12:20:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x15, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa4726888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e86839670a4acaa5d8a890482a5f4e6208cc39b01997be05", [0x0, 0x4]}) 12:20:57 executing program 0: r0 = socket$packet(0x11, 0x10000000003, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x6697, 0x5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x616) 12:20:57 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) 12:20:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:57 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='s']) 12:20:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) 12:20:57 executing program 3: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e92bb62e39270419025f4bc6d66f7a7675d44ab4b965be022136cf3a7d6a3b4f8c1ef3ab901c7e30", @ANYRES16=0x0], 0x2}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x3dee, 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000007c0), 0x0) getpid() fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x2, 0x1}) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000540)="11287cf53c96") syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x8500) 12:20:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000100000000002c0012000c00010069706970000b34b2c00002000800040001000000080012000000000008000200", @ANYRES32=0x0], 0x2}}, 0x0) 12:20:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b0e000a800f0000005e510befccd7", 0x2e}], 0x1, &(0x7f00000001c0)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r1}) 12:20:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:57 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff}, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) [ 330.252559] netlink: 'syz-executor4': attribute type 10 has an invalid length. [ 330.274365] netlink: 'syz-executor4': attribute type 10 has an invalid length. 12:20:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x40000000, 0x0, 0x2ff]}) [ 330.310135] netlink: 'syz-executor4': attribute type 10 has an invalid length. [ 330.362763] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 12:20:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000100)) 12:20:58 executing program 0: r0 = socket$packet(0x11, 0x10000000003, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x6697, 0x5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x616) 12:20:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b0e000a800f0000005e510befccd7", 0x2e}], 0x1, &(0x7f00000001c0)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r1}) 12:20:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x40000000, 0x0, 0x2ff]}) 12:20:58 executing program 5: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 12:20:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000540)=@l2, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) [ 331.287499] audit: type=1326 audit(1540297258.479:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11849 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001240)) 12:20:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 331.332866] netlink: 'syz-executor4': attribute type 10 has an invalid length. [ 331.360587] netlink: 'syz-executor4': attribute type 10 has an invalid length. 12:20:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000]}) 12:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x17, 0x3}) 12:20:58 executing program 2: clone(0x0, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) setuid(0x0) 12:20:58 executing program 3: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/23, 0x17, 0x0) 12:20:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000]}) [ 331.643598] audit: type=1326 audit(1540297258.829:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11881 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 332.083942] audit: type=1326 audit(1540297259.269:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11849 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:59 executing program 0: r0 = socket$packet(0x11, 0x10000000003, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x6697, 0x5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x616) 12:20:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001300)='/dev/zero\x00', 0x0, 0x0) 12:20:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa46b6888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e80000670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:20:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000]}) 12:20:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 332.436372] audit: type=1326 audit(1540297259.629:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11881 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:59 executing program 3: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}}) 12:20:59 executing program 2: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)) 12:20:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x2ff]}) [ 332.566903] hfsplus: unable to find HFS+ superblock [ 332.619815] audit: type=1326 audit(1540297259.809:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11911 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:59 executing program 0: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 12:20:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 332.704749] audit: type=1326 audit(1540297259.879:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11918 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:20:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x2ff]}) 12:21:00 executing program 4: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) setpriority(0x0, 0x0, 0x0) [ 332.768482] audit: type=1326 audit(1540297259.949:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11926 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 332.815431] hfsplus: unable to find HFS+ superblock [ 332.816103] audit: type=1326 audit(1540297259.999:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11926 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:21:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x2ff]}) [ 332.896217] audit: type=1326 audit(1540297260.089:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11939 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 332.972002] hfsplus: unable to find HFS+ superblock 12:21:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x1000000000000) 12:21:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004900002800000000000f9078ac141400ac1423bb0e00907800000000000000000000000000000000"], &(0x7f0000000040)) [ 333.100478] hfsplus: unable to find HFS+ superblock 12:21:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/114, 0x72) [ 333.405716] audit: type=1326 audit(1540297260.589:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11911 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:21:00 executing program 2: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000300)={&(0x7f0000000280)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x18) 12:21:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 333.568317] hfsplus: unable to find HFS+ superblock 12:21:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 12:21:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="39d2202f", 0x4}], 0x1, &(0x7f0000000500)}}], 0x1, 0x0) 12:21:00 executing program 3: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) msgsnd(0x0, &(0x7f0000000140)={0x3}, 0x8, 0x0) 12:21:00 executing program 1: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 12:21:00 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) sendto$inet6(r1, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x0, 0xe603000000000000]}}, 0x1c) 12:21:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xade}, {}]}) 12:21:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='type=k']) [ 333.802266] hfsplus: unable to find HFS+ superblock [ 333.818370] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:21:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d5c6070") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, "0713391d779b28a42dcbabd2d74236100c2aa46b6888505251725d39b45090894e7fce59df6e08e2f2f2c105a1dc10dc3f4d78413665d6929989ad33e62c2d9e", "0dcd504a1b47255c868015ae3875d7d8c8d09ff4abc807ee4195ad2e5ae830f67ac3f093fb7ed6dfb9d8312097ec7ada495454ed3b8e4811eb5c58e15b0220b7", "ad63ff79637b8989e80000670a4acaa5d8a890482a5f4e6208cc39b01997be05"}) 12:21:01 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 333.985161] hfsplus: unable to find HFS+ superblock 12:21:01 executing program 2: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:21:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2000, 0x0) fdatasync(r0) 12:21:01 executing program 4: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 12:21:01 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x9effffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic='\x00']}]}, 0x1c}}, 0x0) [ 334.483718] hfsplus: unable to find HFS+ superblock [ 334.490739] print_req_error: I/O error, dev loop2, sector 0 12:21:01 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x45000) io_setup(0x6, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:21:01 executing program 0: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x275, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) 12:21:01 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) [ 334.643892] hfsplus: unable to find HFS+ superblock 12:21:01 executing program 0: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) prctl$getname(0x10, &(0x7f0000000040)=""/151) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000000)={&(0x7f0000000300)={&(0x7f0000000280)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000180)={0x5000000, 0x800, 0xffff, 0xfffffffffffffff8, 0x11, 0xffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000240)=[{0xd9, 0x1, 0x1, 0x40}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x4, 0x4, 0x8000}, 0x4) 12:21:01 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:02 executing program 3: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x0, 0x0) [ 334.780599] hfsplus: unable to find HFS+ superblock 12:21:02 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 12:21:02 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) sendto$inet6(r0, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev, [0x0, 0x7]}}}, 0x98) [ 335.422846] hfsplus: unable to find HFS+ superblock 12:21:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0xd6) 12:21:02 executing program 2: socket$inet6(0xa, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)) 12:21:02 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001040)=""/4096, 0x1000, 0xfffffffffffffffe}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) 12:21:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 335.573869] EXT4-fs (sda1): resizing filesystem from 524032 to 214 blocks [ 335.606810] EXT4-fs warning (device sda1): ext4_resize_fs:1930: can't shrink FS - resize aborted [ 335.629208] hfsplus: unable to find HFS+ superblock 12:21:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0xd6) 12:21:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e9119351304905bef831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd0000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 12:21:02 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='s']) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) [ 335.650657] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 12:21:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000005c0), 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 335.789469] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 12:21:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:21:03 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xe, &(0x7f00000008c0), 0x370) [ 335.933363] hfsplus: unable to find HFS+ superblock 12:21:03 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0xd6) [ 336.025114] sock: process `syz-executor2' is using obsolete setsockopt SO_BSDCOMPAT 12:21:03 executing program 3: socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 12:21:03 executing program 2: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x8}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) shutdown(r2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 336.123246] hfsplus: unable to find HFS+ superblock 12:21:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 336.215751] EXT4-fs (sda1): resizing filesystem from 524032 to 214 blocks [ 336.241510] EXT4-fs warning (device sda1): ext4_resize_fs:1930: can't shrink FS - resize aborted 12:21:03 executing program 2: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x8}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) shutdown(r2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 336.356734] hfsplus: unable to find HFS+ superblock 12:21:03 executing program 1: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xc, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) [ 336.717617] binder: 12177:12178 ERROR: BC_REGISTER_LOOPER called without request 12:21:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xc, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) 12:21:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") r1 = dup(r0) utimensat(r1, 0x0, 0x0, 0x0) 12:21:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0x36c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, &(0x7f0000000080)) 12:21:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) 12:21:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x50800, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 336.763669] binder: 12177:12179 got transaction to invalid handle [ 336.795911] binder: 12177:12179 transaction failed 29201/-22, size 0-0 line 2834 12:21:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:21:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0x10, 0xfffffffbffffffff) [ 336.829003] hfsplus: unable to find HFS+ superblock [ 336.839062] binder: BINDER_SET_CONTEXT_MGR already set [ 336.856627] binder: 12186:12187 ioctl 40046207 0 returned -16 [ 336.874919] binder: 12186:12187 ERROR: BC_REGISTER_LOOPER called without request [ 336.884561] binder: BINDER_SET_CONTEXT_MGR already set [ 336.890651] binder: 12177:12197 ioctl 40046207 0 returned -16 12:21:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "6b4c99eb"}}]}) [ 336.919871] binder: 12177:12178 ERROR: BC_REGISTER_LOOPER called without request [ 336.928743] binder: 12186:12203 got transaction to invalid handle [ 336.935034] binder: 12186:12203 transaction failed 29201/-22, size 0-0 line 2834 [ 336.947132] binder: 12177:12179 got transaction to invalid handle [ 336.962047] binder: 12177:12179 transaction failed 29201/-22, size 0-0 line 2834 12:21:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) [ 336.974721] binder: release 12177:12178 transaction 20 in, still active [ 336.984744] binder: send failed reply for transaction 20 to 12186:12187 [ 337.007316] binder: undelivered TRANSACTION_ERROR: 29201 12:21:04 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000001a80)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0), 0x400a7, &(0x7f0000000000)=ANY=[]) 12:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 337.025815] hfsplus: unable to find HFS+ superblock [ 337.043121] binder: undelivered TRANSACTION_ERROR: 29201 12:21:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000180)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000600)) socket$inet6(0xa, 0x80806, 0x7ffffffa) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(r2, &(0x7f0000000500)='./bus\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x8000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000340)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f627573205e285c73656c696e75050000007a5f74756e002020656d312073797a5f74756e002073797a5f74756e00202d776c616e046a3fd6312b7d212f0300683000206d696d655f747970655b117dfc276f8e1c6b0001fb9c005c959b63518473c9162c937dbd2d222fba24795dccaf36561e73a8f21bbf01ad441ee299881964a0e8cc8529adfbc482455ecbf89fe9a30c5a43c34a9a8c805b07973a23a8847e2b2effa8ac9c7198a5a9d08603c2517b60797d2d6c3f6f5eb2676cea13fc034fc54d61c2ad6cc9676c1f6d70cf9cf45dfdae8c053e9e85db9acdb0ad46774e69b8a956c80d544b1626a06b39ffd6f88c4500"], 0xf8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000300)={0x1f}, 0xfffffffffffffced) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0x4) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) [ 337.146393] binder_alloc: 12219: binder_alloc_buf, no vma [ 337.171735] binder: 12219:12222 transaction failed 29189/-3, size 24-8 line 2973 [ 337.198925] binder: 12219:12228 ERROR: BC_REGISTER_LOOPER called without request [ 337.230203] binder: BINDER_SET_CONTEXT_MGR already set [ 337.237714] binder: 12219:12228 ioctl 40046207 0 returned -16 [ 337.241742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 337.244044] binder_alloc: 12219: binder_alloc_buf, no vma [ 337.267825] binder: 12219:12228 ERROR: BC_REGISTER_LOOPER called without request [ 337.279867] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.289141] binder: 12219:12222 transaction failed 29189/-3, size 24-8 line 2973 [ 337.323599] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.614485] binder_alloc: binder_alloc_mmap_handler: 12186 20003000-20006000 already mapped failed -16 [ 337.624416] binder_alloc: 12186: binder_alloc_buf, no vma [ 337.630061] binder: 12186:12239 transaction failed 29189/-3, size 24-8 line 2973 [ 337.637865] binder: 12186:12203 ERROR: BC_REGISTER_LOOPER called without request [ 337.646160] binder: 12186:12239 got transaction to invalid handle [ 337.652432] binder: 12186:12239 transaction failed 29201/-22, size 0-0 line 2834 12:21:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xc, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) 12:21:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)) 12:21:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)) 12:21:04 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400004002, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 12:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}) [ 337.660417] binder: undelivered TRANSACTION_COMPLETE [ 337.666480] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.685665] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.691185] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.726152] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.754371] hfsplus: unable to find HFS+ superblock 12:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x10000}) [ 337.774725] binder: 12245:12256 ERROR: BC_REGISTER_LOOPER called without request 12:21:05 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace$setopts(0x4202, r1, 0x0, 0x0) 12:21:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @multicast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 12:21:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)) 12:21:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000002c0)) [ 337.908929] binder: release 12245:12256 transaction 32 out, still active [ 337.932677] binder: unexpected work type, 4, not freed [ 337.953052] binder: undelivered TRANSACTION_COMPLETE 12:21:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 337.975051] binder: send failed reply for transaction 35 to 12245:12256 [ 337.993035] binder: release 12245:12256 transaction 32 in, still active [ 338.005674] binder: send failed reply for transaction 32, target dead 12:21:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000180)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000600)) socket$inet6(0xa, 0x80806, 0x7ffffffa) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(r2, &(0x7f0000000500)='./bus\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x8000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000340)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f627573205e285c73656c696e75050000007a5f74756e002020656d312073797a5f74756e002073797a5f74756e00202d776c616e046a3fd6312b7d212f0300683000206d696d655f747970655b117dfc276f8e1c6b0001fb9c005c959b63518473c9162c937dbd2d222fba24795dccaf36561e73a8f21bbf01ad441ee299881964a0e8cc8529adfbc482455ecbf89fe9a30c5a43c34a9a8c805b07973a23a8847e2b2effa8ac9c7198a5a9d08603c2517b60797d2d6c3f6f5eb2676cea13fc034fc54d61c2ad6cc9676c1f6d70cf9cf45dfdae8c053e9e85db9acdb0ad46774e69b8a956c80d544b1626a06b39ffd6f88c4500"], 0xf8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000300)={0x1f}, 0xfffffffffffffced) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0x4) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) 12:21:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) [ 338.026183] binder: undelivered TRANSACTION_COMPLETE [ 338.031633] hfsplus: unable to find HFS+ superblock [ 338.038340] binder: undelivered TRANSACTION_ERROR: 29189 12:21:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)) 12:21:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000180)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000600)) socket$inet6(0xa, 0x80806, 0x7ffffffa) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(r2, &(0x7f0000000500)='./bus\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x8000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000340)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f627573205e285c73656c696e75050000007a5f74756e002020656d312073797a5f74756e002073797a5f74756e00202d776c616e046a3fd6312b7d212f0300683000206d696d655f747970655b117dfc276f8e1c6b0001fb9c005c959b63518473c9162c937dbd2d222fba24795dccaf36561e73a8f21bbf01ad441ee299881964a0e8cc8529adfbc482455ecbf89fe9a30c5a43c34a9a8c805b07973a23a8847e2b2effa8ac9c7198a5a9d08603c2517b60797d2d6c3f6f5eb2676cea13fc034fc54d61c2ad6cc9676c1f6d70cf9cf45dfdae8c053e9e85db9acdb0ad46774e69b8a956c80d544b1626a06b39ffd6f88c4500"], 0xf8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000300)={0x1f}, 0xfffffffffffffced) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0x4) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) 12:21:05 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x8007531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') [ 338.281657] hfsplus: unable to find HFS+ superblock [ 338.321566] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:21:05 executing program 0: setrlimit(0x0, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 12:21:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)) 12:21:05 executing program 1: 12:21:05 executing program 0: 12:21:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:21:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000900000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b744e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @broadcast}, 0xc) 12:21:06 executing program 3: 12:21:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r1) connect$netlink(r2, &(0x7f00000029c0), 0xc) 12:21:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[{@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@rodir='rodir'}, {@numtail='nonumtail=0'}, {@utf8no='utf8=0'}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@fowner_gt={'fowner>'}}]}) 12:21:06 executing program 4: 12:21:06 executing program 2: 12:21:06 executing program 0: 12:21:06 executing program 4: 12:21:06 executing program 3: 12:21:06 executing program 4: 12:21:06 executing program 0: 12:21:06 executing program 2: 12:21:06 executing program 5: 12:21:06 executing program 3: 12:21:06 executing program 1: 12:21:06 executing program 4: 12:21:06 executing program 2: 12:21:06 executing program 0: 12:21:06 executing program 3: 12:21:06 executing program 4: 12:21:07 executing program 0: 12:21:07 executing program 2: 12:21:07 executing program 1: 12:21:07 executing program 5: 12:21:07 executing program 0: 12:21:07 executing program 4: 12:21:07 executing program 3: 12:21:07 executing program 1: 12:21:07 executing program 2: 12:21:07 executing program 0: 12:21:07 executing program 4: 12:21:07 executing program 5: 12:21:07 executing program 0: 12:21:07 executing program 3: 12:21:07 executing program 4: 12:21:07 executing program 1: 12:21:07 executing program 2: 12:21:07 executing program 0: 12:21:07 executing program 5: 12:21:07 executing program 4: 12:21:07 executing program 3: 12:21:07 executing program 1: 12:21:07 executing program 0: 12:21:07 executing program 5: 12:21:07 executing program 4: 12:21:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r1, &(0x7f0000000400), 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:21:07 executing program 1: 12:21:07 executing program 3: 12:21:07 executing program 0: 12:21:07 executing program 5: 12:21:07 executing program 4: 12:21:07 executing program 1: 12:21:07 executing program 2: 12:21:07 executing program 0: 12:21:07 executing program 3: 12:21:07 executing program 4: 12:21:08 executing program 5: 12:21:08 executing program 1: 12:21:08 executing program 2: 12:21:08 executing program 3: 12:21:08 executing program 0: 12:21:08 executing program 4: 12:21:08 executing program 2: 12:21:08 executing program 1: 12:21:08 executing program 3: 12:21:08 executing program 5: 12:21:08 executing program 4: 12:21:08 executing program 0: 12:21:08 executing program 1: 12:21:08 executing program 2: 12:21:08 executing program 4: 12:21:08 executing program 5: 12:21:08 executing program 0: 12:21:08 executing program 3: 12:21:08 executing program 1: 12:21:08 executing program 2: 12:21:08 executing program 5: 12:21:08 executing program 4: 12:21:08 executing program 3: 12:21:08 executing program 2: 12:21:08 executing program 0: 12:21:08 executing program 4: 12:21:08 executing program 5: 12:21:08 executing program 1: 12:21:08 executing program 2: 12:21:08 executing program 3: 12:21:08 executing program 4: 12:21:08 executing program 5: 12:21:08 executing program 0: 12:21:08 executing program 1: 12:21:08 executing program 2: 12:21:09 executing program 4: 12:21:09 executing program 3: 12:21:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0xfffffffffffffef1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}}], 0x1, 0x0, &(0x7f00000008c0)) 12:21:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 12:21:09 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0xffffffff00000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, @perf_config_ext}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001030000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xf8, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", &(0x7f0000000380)=""/248, 0x101}, 0x28) 12:21:09 executing program 0: r0 = socket$kcm(0x29, 0x1, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x8000000003, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8981, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x24000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000240)={r0}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000004c0)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000440)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) close(r7) openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.threads\x00', 0x2, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='+[vboxnet0trusted\x00', 0xffffffffffffff9c}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000005c0)={0x1, 0x70, 0x7ff, 0xaae, 0x7f, 0x9, 0x0, 0x7, 0x40, 0x1, 0x1ff, 0x4, 0x3, 0x7, 0x3712d388, 0x100, 0x8001, 0xfffffffffffff6d0, 0x2, 0x11f, 0x6, 0x3, 0x40, 0x80000001, 0xfffffffffffffff7, 0x8, 0x67, 0x1000, 0x6, 0xffff, 0x2, 0x0, 0x0, 0x9, 0x5, 0x0, 0x7, 0x7f, 0x0, 0x800, 0x2, @perf_config_ext={0x3901, 0x1}, 0x2, 0x200, 0x9, 0x7, 0xfffffffffffffc00, 0x20, 0xffff}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'yam0\x00', 0x200}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x4, 0x8, 0x7, 0x20, 0xfdffffffff7fffff, 0x1}, 0x18e) close(r9) socket$kcm(0xa, 0x5, 0x0) 12:21:09 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="01"]) 12:21:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/105, 0x18) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xffff) 12:21:09 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) 12:21:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) 12:21:09 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000580)=""/4096) 12:21:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000001340)) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) [ 342.375364] ODEBUG: object 00000000292f6ec8 is on stack 000000008dc33ab4, but NOT annotated. [ 342.387627] WARNING: CPU: 1 PID: 12580 at lib/debugobjects.c:369 __debug_object_init.cold.14+0x51/0xdf [ 342.389171] kobject: 'kvm' (000000004a4b011d): kobject_uevent_env [ 342.397092] Kernel panic - not syncing: panic_on_warn set ... [ 342.397108] CPU: 1 PID: 12580 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 342.397116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:21:09 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000580)=""/4096) [ 342.397121] Call Trace: [ 342.397144] dump_stack+0x244/0x39d [ 342.397165] ? dump_stack_print_info.cold.1+0x20/0x20 [ 342.437617] kobject: 'kvm' (000000004a4b011d): kobject_uevent_env [ 342.438488] panic+0x2ad/0x55c [ 342.438509] ? add_taint.cold.5+0x16/0x16 [ 342.448145] kobject: 'kvm' (000000004a4b011d): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 342.452076] ? __warn.cold.8+0x5/0x45 [ 342.452099] ? __debug_object_init.cold.14+0x51/0xdf [ 342.469999] __warn.cold.8+0x20/0x45 [ 342.473743] ? __debug_object_init.cold.14+0x51/0xdf 12:21:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 342.478870] report_bug+0x254/0x2d0 [ 342.482603] do_error_trap+0x11b/0x200 [ 342.486475] kobject: 'kvm' (000000004a4b011d): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 342.486514] do_invalid_op+0x36/0x40 [ 342.499236] ? __debug_object_init.cold.14+0x51/0xdf [ 342.504413] invalid_op+0x14/0x20 [ 342.507884] RIP: 0010:__debug_object_init.cold.14+0x51/0xdf 12:21:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 342.513604] Code: ea 03 80 3c 02 00 75 7c 49 8b 54 24 18 48 89 de 48 c7 c7 c0 f1 40 88 4c 89 85 d0 fd ff ff e8 09 8c d1 fd 4c 8b 85 d0 fd ff ff <0f> 0b e9 09 d6 ff ff 41 83 c4 01 b8 ff ff 37 00 44 89 25 b7 4e 66 [ 342.520254] kobject: 'kvm' (000000004a4b011d): kobject_uevent_env [ 342.532514] RSP: 0018:ffff88017d317308 EFLAGS: 00010086 [ 342.532526] RAX: 0000000000000050 RBX: ffff88017d317af8 RCX: ffffc9000407f000 [ 342.532535] RDX: 0000000000000000 RSI: ffffffff816585a5 RDI: 0000000000000005 [ 342.532543] RBP: ffff88017d317560 R08: ffff880180bc2748 R09: ffffed003b5e5008 [ 342.532552] R10: ffffed003b5e5008 R11: ffff8801daf28047 R12: ffff88018d7a6380 [ 342.532561] R13: 0000000000099640 R14: ffff88018d7a6380 R15: ffff880180bc2738 [ 342.532593] ? vprintk_func+0x85/0x181 [ 342.560515] kobject: 'kvm' (000000004a4b011d): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 342.566015] ? __debug_object_init.cold.14+0x4a/0xdf [ 342.566042] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 342.566062] ? debug_object_free+0x690/0x690 [ 342.566082] ? unwind_get_return_address+0x61/0xa0 [ 342.612485] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 342.617596] ? depot_save_stack+0x292/0x470 [ 342.621941] ? save_stack+0xa9/0xd0 [ 342.625570] ? save_stack+0x43/0xd0 [ 342.629199] ? kasan_kmalloc+0xc7/0xe0 [ 342.633095] ? bpf_test_init.isra.10+0x98/0x100 [ 342.637764] ? zap_class+0x640/0x640 [ 342.641481] ? do_syscall_64+0x1b9/0x820 [ 342.645542] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.650918] ? find_held_lock+0x36/0x1c0 [ 342.654986] debug_object_init+0x16/0x20 [ 342.659065] init_timer_key+0xa9/0x480 [ 342.662962] ? init_timer_on_stack_key+0xe0/0xe0 [ 342.667719] ? __might_fault+0x12b/0x1e0 [ 342.671779] ? __lockdep_init_map+0x105/0x590 [ 342.676281] ? __lockdep_init_map+0x105/0x590 [ 342.680779] ? lockdep_init_map+0x9/0x10 [ 342.684851] sock_init_data+0xe1/0xdc0 [ 342.688738] ? sk_stop_timer+0x50/0x50 [ 342.692631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.698174] ? _copy_from_user+0xdf/0x150 [ 342.702325] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.707867] ? bpf_test_init.isra.10+0x70/0x100 [ 342.712543] bpf_prog_test_run_skb+0x255/0xc40 [ 342.717136] ? __lock_acquire+0x62f/0x4c20 [ 342.721373] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 342.726217] ? __lock_acquire+0x62f/0x4c20 [ 342.730533] ? fput+0x130/0x1a0 [ 342.733820] ? __bpf_prog_get+0x9b/0x290 [ 342.737888] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 342.742730] bpf_prog_test_run+0x130/0x1a0 [ 342.746967] __x64_sys_bpf+0x3d8/0x510 [ 342.750854] ? bpf_prog_get+0x20/0x20 [ 342.754666] do_syscall_64+0x1b9/0x820 [ 342.758553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.763925] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.768859] ? trace_hardirqs_on_caller+0x310/0x310 [ 342.773878] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.778896] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 342.785588] ? __switch_to_asm+0x40/0x70 [ 342.789647] ? __switch_to_asm+0x34/0x70 [ 342.793712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.798559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.803747] RIP: 0033:0x457569 [ 342.806952] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.825867] RSP: 002b:00007f1831fafc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.833574] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 342.840842] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 342.848288] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 342.855559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1831fb06d4 [ 342.862826] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 342.870111] [ 342.870118] ====================================================== [ 342.870124] WARNING: possible circular locking dependency detected [ 342.870129] 4.19.0-rc8-next-20181019+ #98 Not tainted [ 342.870135] ------------------------------------------------------ [ 342.870140] syz-executor1/12580 is trying to acquire lock: [ 342.870144] 00000000ca7310da ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 342.870160] [ 342.870164] but task is already holding lock: [ 342.870168] 00000000ff407897 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 342.870184] [ 342.870189] which lock already depends on the new lock. [ 342.870191] [ 342.870194] [ 342.870200] the existing dependency chain (in reverse order) is: [ 342.870202] [ 342.870205] -> #3 (&obj_hash[i].lock){-.-.}: [ 342.870221] _raw_spin_lock_irqsave+0x99/0xd0 [ 342.870225] __debug_object_init+0x127/0x1290 [ 342.870230] debug_object_init+0x16/0x20 [ 342.870234] hrtimer_init+0x97/0x490 [ 342.870239] init_dl_task_timer+0x1b/0x50 [ 342.870243] __sched_fork+0x2ae/0x590 [ 342.870247] init_idle+0x75/0x740 [ 342.870251] sched_init+0xb33/0xc02 [ 342.870256] start_kernel+0x4be/0xa2b [ 342.870261] x86_64_start_reservations+0x2e/0x30 [ 342.870265] x86_64_start_kernel+0x76/0x79 [ 342.870270] secondary_startup_64+0xa4/0xb0 [ 342.870272] [ 342.870275] -> #2 (&rq->lock){-.-.}: [ 342.870289] _raw_spin_lock+0x2d/0x40 [ 342.870294] task_fork_fair+0xb0/0x6d0 [ 342.870298] sched_fork+0x443/0xba0 [ 342.870302] copy_process+0x2585/0x8770 [ 342.870306] _do_fork+0x1cb/0x11c0 [ 342.870311] kernel_thread+0x34/0x40 [ 342.870315] rest_init+0x28/0x372 [ 342.870319] arch_call_rest_init+0xe/0x1b [ 342.870323] start_kernel+0x9f0/0xa2b [ 342.870328] x86_64_start_reservations+0x2e/0x30 [ 342.870333] x86_64_start_kernel+0x76/0x79 [ 342.870338] secondary_startup_64+0xa4/0xb0 [ 342.870340] [ 342.870342] -> #1 (&p->pi_lock){-.-.}: [ 342.870358] _raw_spin_lock_irqsave+0x99/0xd0 [ 342.870362] try_to_wake_up+0xd2/0x12e0 [ 342.870367] wake_up_process+0x10/0x20 [ 342.870371] __up.isra.1+0x1c0/0x2a0 [ 342.870375] up+0x13c/0x1c0 [ 342.870379] __up_console_sem+0xbe/0x1b0 [ 342.870384] console_unlock+0x80c/0x1190 [ 342.870388] vprintk_emit+0x391/0x990 [ 342.870393] vprintk_default+0x28/0x30 [ 342.870397] vprintk_func+0x7e/0x181 [ 342.870401] printk+0xa7/0xcf [ 342.870405] do_exit.cold.18+0x57/0x16f [ 342.870410] do_group_exit+0x177/0x440 [ 342.870414] __x64_sys_exit_group+0x3e/0x50 [ 342.870418] do_syscall_64+0x1b9/0x820 [ 342.870424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.870426] [ 342.870429] -> #0 ((console_sem).lock){-.-.}: [ 342.870444] lock_acquire+0x1ed/0x520 [ 342.870449] _raw_spin_lock_irqsave+0x99/0xd0 [ 342.870453] down_trylock+0x13/0x70 [ 342.870458] __down_trylock_console_sem+0xae/0x1f0 [ 342.870462] console_trylock+0x15/0xa0 [ 342.870467] vprintk_emit+0x372/0x990 [ 342.870471] vprintk_default+0x28/0x30 [ 342.870475] vprintk_func+0x7e/0x181 [ 342.870479] printk+0xa7/0xcf [ 342.870484] __debug_object_init.cold.14+0x4a/0xdf [ 342.870488] debug_object_init+0x16/0x20 [ 342.870493] init_timer_key+0xa9/0x480 [ 342.870497] sock_init_data+0xe1/0xdc0 [ 342.870502] bpf_prog_test_run_skb+0x255/0xc40 [ 342.870507] bpf_prog_test_run+0x130/0x1a0 [ 342.870511] __x64_sys_bpf+0x3d8/0x510 [ 342.870515] do_syscall_64+0x1b9/0x820 [ 342.870521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.870523] [ 342.870528] other info that might help us debug this: [ 342.870530] [ 342.870534] Chain exists of: [ 342.870536] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 342.870556] [ 342.870561] Possible unsafe locking scenario: [ 342.870563] [ 342.870567] CPU0 CPU1 [ 342.870572] ---- ---- [ 342.870575] lock(&obj_hash[i].lock); [ 342.870585] lock(&rq->lock); [ 342.870595] lock(&obj_hash[i].lock); [ 342.870605] lock((console_sem).lock); [ 342.870613] [ 342.870617] *** DEADLOCK *** [ 342.870619] [ 342.870624] 1 lock held by syz-executor1/12580: [ 342.870626] #0: 00000000ff407897 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 342.870646] [ 342.870649] stack backtrace: [ 342.870657] CPU: 1 PID: 12580 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 342.870665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.870668] Call Trace: [ 342.870672] dump_stack+0x244/0x39d [ 342.870677] ? dump_stack_print_info.cold.1+0x20/0x20 [ 342.870682] ? vprintk_func+0x85/0x181 [ 342.870688] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 342.870692] ? save_trace+0xe0/0x290 [ 342.870697] __lock_acquire+0x3399/0x4c20 [ 342.870701] ? mark_held_locks+0x130/0x130 [ 342.870705] ? put_dec+0xf0/0xf0 [ 342.870710] ? mark_held_locks+0x130/0x130 [ 342.870714] ? pointer_string+0x14e/0x1b0 [ 342.870718] ? number+0xca0/0xca0 [ 342.870723] ? update_load_avg+0x2470/0x2470 [ 342.870727] ? print_usage_bug+0xc0/0xc0 [ 342.870731] ? ptr_to_id+0xd0/0x1d0 [ 342.870735] ? dentry_name+0x8f0/0x8f0 [ 342.870740] ? pick_next_task_fair+0xa35/0x1c90 [ 342.870744] ? zap_class+0x640/0x640 [ 342.870749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 342.870754] lock_acquire+0x1ed/0x520 [ 342.870758] ? down_trylock+0x13/0x70 [ 342.870762] ? lock_release+0xa10/0xa10 [ 342.870767] ? trace_hardirqs_off+0xb8/0x310 [ 342.870771] ? vprintk_emit+0x1de/0x990 [ 342.870776] ? trace_hardirqs_on+0x310/0x310 [ 342.870780] ? trace_hardirqs_off+0xb8/0x310 [ 342.870785] ? log_store+0x344/0x4c0 [ 342.870795] ? vprintk_emit+0x372/0x990 [ 342.870799] _raw_spin_lock_irqsave+0x99/0xd0 [ 342.870803] ? down_trylock+0x13/0x70 [ 342.870808] down_trylock+0x13/0x70 [ 342.870813] __down_trylock_console_sem+0xae/0x1f0 [ 342.870817] console_trylock+0x15/0xa0 [ 342.870821] vprintk_emit+0x372/0x990 [ 342.870825] ? wake_up_klogd+0x180/0x180 [ 342.870830] ? zap_class+0x640/0x640 [ 342.870834] ? __switch_to_asm+0x34/0x70 [ 342.870838] ? __switch_to_asm+0x40/0x70 [ 342.870843] ? print_usage_bug+0xc0/0xc0 [ 342.870847] ? __switch_to_asm+0x40/0x70 [ 342.870851] ? find_held_lock+0x36/0x1c0 [ 342.870856] vprintk_default+0x28/0x30 [ 342.870860] vprintk_func+0x7e/0x181 [ 342.870864] printk+0xa7/0xcf [ 342.870869] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 342.870873] __debug_object_init.cold.14+0x4a/0xdf [ 342.870878] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 342.870883] ? debug_object_free+0x690/0x690 [ 342.870888] ? unwind_get_return_address+0x61/0xa0 [ 342.870893] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 342.870898] ? depot_save_stack+0x292/0x470 [ 342.870902] ? save_stack+0xa9/0xd0 [ 342.870906] ? save_stack+0x43/0xd0 [ 342.870910] ? kasan_kmalloc+0xc7/0xe0 [ 342.870915] ? bpf_test_init.isra.10+0x98/0x100 [ 342.870920] ? zap_class+0x640/0x640 [ 342.870924] ? do_syscall_64+0x1b9/0x820 [ 342.870929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.870934] ? find_held_lock+0x36/0x1c0 [ 342.870938] debug_object_init+0x16/0x20 [ 342.870943] init_timer_key+0xa9/0x480 [ 342.870947] ? init_timer_on_stack_key+0xe0/0xe0 [ 342.870952] ? __might_fault+0x12b/0x1e0 [ 342.870956] ? __lockdep_init_map+0x105/0x590 [ 342.870961] ? __lockdep_init_map+0x105/0x590 [ 342.870966] ? lockdep_init_map+0x9/0x10 [ 342.870970] sock_init_data+0xe1/0xdc0 [ 342.870974] ? sk_stop_timer+0x50/0x50 [ 342.870980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.870984] ? _copy_from_user+0xdf/0x150 [ 342.870990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.870995] ? bpf_test_init.isra.10+0x70/0x100 [ 342.870999] bpf_prog_test_run_skb+0x255/0xc40 [ 342.871004] ? __lock_acquire+0x62f/0x4c20 [ 342.871009] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 342.871014] ? __lock_acquire+0x62f/0x4c20 [ 342.871018] ? fput+0x130/0x1a0 [ 342.871030] ? __bpf_prog_get+0x9b/0x290 [ 342.871035] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 342.871040] bpf_prog_test_run+0x130/0x1a0 [ 342.871044] __x64_sys_bpf+0x3d8/0x510 [ 342.871048] ? bpf_prog_get+0x20/0x20 [ 342.871052] do_syscall_64+0x1b9/0x820 [ 342.871058] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.871063] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.871068] ? trace_hardirqs_on_caller+0x310/0x310 [ 342.871073] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.871080] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 342.871084] ? __switch_to_asm+0x40/0x70 [ 342.871089] ? __switch_to_asm+0x34/0x70 [ 342.871093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.871099] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.871102] RIP: 0033:0x457569 [ 342.871117] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.871122] RSP: 002b:00007f1831fafc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.871133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 342.871140] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 342.871146] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 342.871153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1831fb06d4 [ 342.871159] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 342.872018] Kernel Offset: disabled [ 343.782887] Rebooting in 86400 seconds..