e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:07 executing program 3: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="d3abc7990d535c9e70bc111c8eff68a1110c19fcc0b30002", 0x18) 13:10:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r3 = socket$kcm(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="c22b87439c0f9fa944793e0f5d5fc1e91c834aeac200f8efb3664c2ec648535a9800182c240c75568d82adfeacf44b288b0942ae2230cab0cd9d7a6d20815d"], &(0x7f00000001c0)=0x349) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 13:10:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="d3abc7990d535c9e70bc111c8eff68a1110c19fcc0b30002", 0x18) 13:10:11 executing program 3: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="d3abc7990d535c9e70bc111c8eff68a1110c19fcc0b30002", 0x18) 13:10:11 executing program 5: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r0, &(0x7f00000001c0)="0042e349f87fba53", 0x8) fcntl$addseals(r0, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) 13:10:11 executing program 2: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:11 executing program 0: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:10:11 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) close(r0) 13:10:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="d3abc7990d535c9e70bc111c8eff68a1110c19fcc0b30002", 0x18) 13:10:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:10:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x8000000000024) 13:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x59) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:10:12 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 13:10:13 executing program 3: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:13 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7, 0x31424752, 0x0, @stepwise}) 13:10:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:10:14 executing program 2: pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x4, 0x0, 0x0, 0x10000000002) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0xffffffffffffff66) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe(&(0x7f00000000c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x20081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) kexec_load(0x0, 0x0, &(0x7f0000000080), 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:10:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0) 13:10:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xfffffca0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x536e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a36, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100040031, 0xffffffffffffffff, 0x0) 13:10:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:10:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 13:10:15 executing program 4: setresuid(0xee01, 0xffffffffffffffff, 0xee00) clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() tkill(r1, 0x1e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setreuid(0x0, r3) tkill(r0, 0x12) [ 296.515228][ T26] audit: type=1800 audit(1572354615.264:48): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=17008 res=0 13:10:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:15 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 13:10:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 13:10:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 13:10:17 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x41) 13:10:17 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 13:10:17 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 13:10:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="bd384ce1f54f7c522811c090bbf4ef7b4926a15e53a1bbb46854e2666d3327c6ae8e714ad8116298b6e23a4b036512e680d8864f6e29ae93b95733e5d0164691a37189b857a07bae4ee2995204e470c4c5ae2742f1a98076174e9420fa41857fbd21c794423e7851022eb84c0059c29ec119542880d2e770e56b498dfc425e4fdc7abdf6be20499b8bb6eb267a31a66c683c0feb6ecc488f3a2dc72e6db795aad7b717787df3b8e32eba76dddafc94c432d52ad8d07cc2cd9e3831e868ed4781c75508b8b07196c7b2", 0xc9, 0xa6cf07db3353d94, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x1624, 0x11, 0x0, 0x27) 13:10:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 13:10:17 executing program 2: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000140), 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, 0x0, 0x0) bind(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ce03100001000140ff901efc9fb3d904827c000000007d8599b512fceb92bd30961166", 0x23, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x10', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d300000000000000002bee6f569303030"]) 13:10:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 13:10:18 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x20060e0, &(0x7f00000006c0)={[], [{@uid_eq={'uid'}}]}) 13:10:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setreuid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x1f8) setresuid(r3, 0x0, 0x0) 13:10:18 executing program 2: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000140), 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, 0x0, 0x0) bind(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ce03100001000140ff901efc9fb3d904827c000000007d8599b512fceb92bd30961166", 0x23, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x10', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d300000000000000002bee6f569303030"]) 13:10:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) 13:10:18 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:18 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x20060e0, &(0x7f00000006c0)={[], [{@uid_eq={'uid'}}]}) 13:10:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) shutdown(r1, 0x0) 13:10:18 executing program 2: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000140), 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, 0x0, 0x0) bind(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ce03100001000140ff901efc9fb3d904827c000000007d8599b512fceb92bd30961166", 0x23, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x10', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d300000000000000002bee6f569303030"]) 13:10:18 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x20060e0, &(0x7f00000006c0)={[], [{@uid_eq={'uid'}}]}) [ 299.868968][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 299.900316][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:10:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) shutdown(r1, 0x0) 13:10:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) 13:10:18 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) [ 300.141951][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:10:18 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x20060e0, &(0x7f00000006c0)={[], [{@uid_eq={'uid'}}]}) 13:10:18 executing program 2: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000140), 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, 0x0, 0x0) bind(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ce03100001000140ff901efc9fb3d904827c000000007d8599b512fceb92bd30961166", 0x23, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x10', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d300000000000000002bee6f569303030"]) 13:10:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) shutdown(r1, 0x0) 13:10:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000680)={{0x9, 0x7}, 'port0\x00', 0x4, 0x21400, 0x922, 0x7fff, 0x40, 0x8, 0x3f, 0x0, 0xa, 0x80000}) keyctl$session_to_parent(0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sched_yield() ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000380)='\x00') r2 = dup(r1) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="e5510142cf8b33c4bba137fc0711763a1d02ecc7f9f3cb4d7437e23954978027ecb82fc6c544fe5287497378f62e8dbfbdda162c3686ba44093d08825f135d12f7e696ebd25e01c260510011e6382d857b3f472fa6fb"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="064188625af0534466649c42f4ed", @ANYRES16=r6, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r9, 0x7709, &(0x7f0000000380)='\x00') r10 = dup(r9) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000003c0)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r11, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r11, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r11, 0x7709, &(0x7f0000000380)='\x00') r12 = dup(r11) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f00000003c0)) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r13, 0x0) ioctl$ASHMEM_SET_NAME(r13, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r13, 0x40087707, &(0x7f00000003c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r13, 0x7709, &(0x7f0000000380)='\x00') r14 = dup(r13) ioctl$MON_IOCG_STATS(r14, 0x80089203, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd10140}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x90, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r14}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f0000000480)=""/201, 0xc9}, 0x2f4fffac251f7f17) setsockopt$bt_BT_CHANNEL_POLICY(r15, 0x112, 0xa, &(0x7f00000005c0)=0x6, 0x4) [ 300.404735][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:10:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) shutdown(r1, 0x0) 13:10:19 executing program 0: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="1f73fe7112a1a364e28a03ffe5bcff79c5f5e0d73bdfe50b3d06b363376e47b37fd11b390721bc2e3f21611a998d85e7e243748faf0953ae7761513b5895f5786fac4b8cff264f63da7cd5f67a05836d7f88ed622a212f38dc25131e6fc4d14658801a2a0ec2d12180b0de7cc77006466cfa9245f73fc6535e6a9be43c663f2cf15fd85f15dd6b2f724a859ef75584d2a2affc9426e164cad8d20832f693dd6805e8c592c0cbe129c76394efce3a55ea1a2bbd9a65789de1adbdcc46c118ca6d377d29c97a1b53311f64b1014ca5a808bd", 0xd1}, {&(0x7f0000000240)="1456606e4384edc7fbdc24eacacd6322de263f0b2b47671e307cd80e97b0fe47b23bc67c4bed68ce9a2c647910c800215ed5fa5c6239e61f0f198d8d8a1d5c354c613768b242fc9f4821a96deda0dfe78fe21902e1c92fae9182aba30324c3c682aa4556807afeda3cf83abba50185ed", 0x70}, {&(0x7f0000000440)="3fbb52f93bfe44cb78e49e75a1ec04e88e4bcabd5bbf7fc626ae9e", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000580)="a7a2aab39eb87095a3976251cafeb2845c1ca3e2b0b31bc2e1159319c2fa3c84de0aaf8db3410089decdaaaf280e8981c097c64306ed65e32ce1706d944a0a3d5b0a854eb446126204231af633a06fc6ab2edf6fe0f94f971257fd01fb30d53fb716ebece31088428f69cb194ecaa218bef98c1b8e76acfd41fe8c9e135653d9b5d76f98808c9ca243ae7ded5d568c83a953044bb0c768e69a0a572de10f4f61f746b5fd5e5144d3f170765022a62c59df4722da4931d5312c1f4e59", 0xbc}, {&(0x7f0000000740)="c5", 0x1}], 0x2}}], 0x2, 0x0) [ 300.706788][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:10:19 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r2) ioprio_set$uid(0x3, r2, 0x0) 13:10:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, r1, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x28, 0x17, {0x0, 0x0, @l2={'ibv\xf7N\x9f\x8bl\x9bg\xb5\x81\xa9`\xd0\xa7', 0x3a, 'batadv0\x00'}}}}}, 0x44}}, 0x0) 13:10:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0xc, &(0x7f00000000c0), 0x7c28b568130b98a6) 13:10:19 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 301.020329][T12876] Enabling of bearer rejected, illegal name 13:10:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x80000000000003}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @loopback}, 0xc) [ 301.080104][T12879] Enabling of bearer rejected, illegal name 13:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r0, 0x59, 0x0) 13:10:19 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x80002, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/64, 0x40}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}, 0x0) 13:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 13:10:20 executing program 0: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:20 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x2, &(0x7f0000000000), 0x4a09f6) [ 301.590426][T12903] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 13:10:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:20 executing program 5: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 301.661642][T12909] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 13:10:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x2, &(0x7f0000000000), 0x4a09f6) 13:10:20 executing program 0: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x3fffe53, 0x0, 0x0) 13:10:20 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:10:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x2, &(0x7f0000000000), 0x4a09f6) 13:10:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x305) shutdown(r0, 0x0) 13:10:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x2, &(0x7f0000000000), 0x4a09f6) [ 302.234265][T12926] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 302.276490][T12926] CPU: 1 PID: 12926 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 302.286479][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.286502][T12926] Call Trace: [ 302.286592][T12926] dump_stack+0x172/0x1f0 [ 302.286612][T12926] dump_header+0x177/0x1152 [ 302.286657][T12926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 302.286670][T12926] ? ___ratelimit+0x2c8/0x595 [ 302.319490][T12926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 302.325318][T12926] ? lockdep_hardirqs_on+0x421/0x5e0 [ 302.330614][T12926] ? trace_hardirqs_on+0x67/0x240 [ 302.330634][T12926] ? pagefault_out_of_memory+0x11c/0x11c [ 302.330653][T12926] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 302.330670][T12926] ? ___ratelimit+0x60/0x595 [ 302.330682][T12926] ? do_raw_spin_unlock+0x57/0x270 [ 302.330701][T12926] oom_kill_process.cold+0x10/0x15 [ 302.361987][T12926] out_of_memory+0x334/0x1340 [ 302.366692][T12926] ? __sched_text_start+0x8/0x8 [ 302.371560][T12926] ? oom_killer_disable+0x280/0x280 [ 302.371592][T12926] mem_cgroup_out_of_memory+0x1d8/0x240 [ 302.371607][T12926] ? memcg_stat_show+0xc30/0xc30 [ 302.371632][T12926] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 302.371650][T12926] ? cgroup_file_notify+0x140/0x1b0 [ 302.371669][T12926] memory_max_write+0x262/0x3a0 [ 302.371689][T12926] ? mem_cgroup_write+0x370/0x370 [ 302.371706][T12926] ? lock_acquire+0x190/0x410 [ 302.371722][T12926] ? kernfs_fop_write+0x1df/0x4a0 [ 302.371743][T12926] cgroup_file_write+0x241/0x790 [ 302.387777][T12926] ? mem_cgroup_write+0x370/0x370 [ 302.428628][T12926] ? link_css_set+0x550/0x550 [ 302.433332][T12926] ? link_css_set+0x550/0x550 [ 302.438037][T12926] kernfs_fop_write+0x270/0x4a0 [ 302.442905][T12926] __vfs_write+0x8a/0x110 [ 302.447252][T12926] ? kernfs_fop_open+0xd80/0xd80 [ 302.452206][T12926] vfs_write+0x268/0x5d0 [ 302.456480][T12926] ksys_write+0x14f/0x290 [ 302.460853][T12926] ? __ia32_sys_read+0xb0/0xb0 [ 302.465634][T12926] ? do_syscall_64+0x26/0x760 [ 302.470587][T12926] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.477100][T12926] ? do_syscall_64+0x26/0x760 [ 302.481808][T12926] __x64_sys_write+0x73/0xb0 [ 302.486419][T12926] do_syscall_64+0xfa/0x760 [ 302.490951][T12926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.496841][T12926] RIP: 0033:0x459f49 [ 302.500848][T12926] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.521659][T12926] RSP: 002b:00007f7c016e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.530098][T12926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 302.538607][T12926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 302.546582][T12926] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 302.554917][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c016e66d4 [ 302.562930][T12926] R13: 00000000004ca630 R14: 00000000004e27a8 R15: 00000000ffffffff [ 302.572884][T12926] memory: usage 29688kB, limit 0kB, failcnt 0 [ 302.655431][T12926] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) [ 302.721365][T12926] Memory cgroup stats for /syz1: [ 302.721698][T12926] anon 26177536 [ 302.721698][T12926] file 151552 [ 302.721698][T12926] kernel_stack 327680 [ 302.721698][T12926] slab 2981888 [ 302.721698][T12926] sock 0 [ 302.721698][T12926] shmem 212992 [ 302.721698][T12926] file_mapped 0 [ 302.721698][T12926] file_dirty 0 [ 302.721698][T12926] file_writeback 0 [ 302.721698][T12926] anon_thp 16777216 [ 302.721698][T12926] inactive_anon 12558336 [ 302.721698][T12926] active_anon 13410304 13:10:21 executing program 5: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 302.721698][T12926] inactive_file 135168 [ 302.721698][T12926] active_file 0 [ 302.721698][T12926] unevictable 0 [ 302.721698][T12926] slab_reclaimable 1081344 [ 302.721698][T12926] slab_unreclaimable 1900544 [ 302.721698][T12926] pgfault 24651 [ 302.721698][T12926] pgmajfault 0 [ 302.721698][T12926] workingset_refault 0 [ 302.721698][T12926] workingset_activate 0 [ 302.721698][T12926] workingset_nodereclaim 0 [ 302.721698][T12926] pgrefill 0 [ 302.721698][T12926] pgscan 0 [ 302.721698][T12926] pgsteal 0 [ 302.721698][T12926] pgactivate 0 13:10:21 executing program 3: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:10:21 executing program 4: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 302.862649][T12926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12580,uid=0 [ 302.880186][T12926] Memory cgroup out of memory: Killed process 12580 (syz-executor.1) total-vm:60568kB, anon-rss:6208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 302.992665][T12912] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 303.011750][T12912] CPU: 0 PID: 12912 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 303.021073][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.031233][T12912] Call Trace: [ 303.034547][T12912] dump_stack+0x172/0x1f0 [ 303.038910][T12912] dump_header+0x177/0x1152 [ 303.043455][T12912] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.049282][T12912] ? ___ratelimit+0x2c8/0x595 [ 303.053980][T12912] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.059821][T12912] ? lockdep_hardirqs_on+0x421/0x5e0 [ 303.065210][T12912] ? trace_hardirqs_on+0x67/0x240 [ 303.065309][T12912] ? pagefault_out_of_memory+0x11c/0x11c [ 303.076259][T12912] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 303.076278][T12912] ? ___ratelimit+0x60/0x595 [ 303.076293][T12912] ? do_raw_spin_unlock+0x57/0x270 [ 303.076315][T12912] oom_kill_process.cold+0x10/0x15 [ 303.076333][T12912] out_of_memory+0x334/0x1340 [ 303.076354][T12912] ? oom_killer_disable+0x280/0x280 [ 303.076380][T12912] mem_cgroup_out_of_memory+0x1d8/0x240 [ 303.086961][T12912] ? memcg_stat_show+0xc30/0xc30 [ 303.086984][T12912] ? do_raw_spin_unlock+0x57/0x270 [ 303.087003][T12912] ? _raw_spin_unlock+0x28/0x40 [ 303.087024][T12912] try_charge+0xf4b/0x1440 [ 303.087049][T12912] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 303.097254][T12912] ? percpu_ref_tryget_live+0x10c/0x290 [ 303.097275][T12912] ? rcu_read_lock_held+0x9c/0xb0 [ 303.097293][T12912] ? __kasan_check_read+0x11/0x20 [ 303.097316][T12912] ? get_mem_cgroup_from_mm+0x151/0x310 [ 303.097334][T12912] mem_cgroup_try_charge+0x136/0x590 [ 303.097353][T12912] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 303.107223][T12912] __handle_mm_fault+0x1ec9/0x3fd0 [ 303.107256][T12912] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 303.107273][T12912] ? handle_mm_fault+0x292/0xa90 [ 303.107301][T12912] ? handle_mm_fault+0x7dd/0xa90 [ 303.107318][T12912] ? __kasan_check_read+0x11/0x20 [ 303.107342][T12912] handle_mm_fault+0x3b2/0xa90 [ 303.122887][T12912] __do_page_fault+0x536/0xdd0 [ 303.122920][T12912] do_page_fault+0x38/0x590 [ 303.122941][T12912] page_fault+0x39/0x40 [ 303.122954][T12912] RIP: 0033:0x41173f [ 303.122970][T12912] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 303.122977][T12912] RSP: 002b:00007fff8f9994a0 EFLAGS: 00010206 [ 303.122988][T12912] RAX: 00007f7c016a5000 RBX: 0000000000020000 RCX: 0000000000459f9a [ 303.122995][T12912] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 303.123003][T12912] RBP: 00007fff8f999580 R08: ffffffffffffffff R09: 0000000000000000 [ 303.123010][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8f999670 [ 303.123022][T12912] R13: 00007f7c016c5700 R14: 0000000000000002 R15: 000000000075c07c [ 303.177198][T12912] memory: usage 23292kB, limit 0kB, failcnt 8 [ 303.495503][T12912] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 303.502603][T12912] Memory cgroup stats for /syz1: [ 303.502942][T12912] anon 19722240 [ 303.502942][T12912] file 151552 [ 303.502942][T12912] kernel_stack 327680 [ 303.502942][T12912] slab 2981888 [ 303.502942][T12912] sock 0 [ 303.502942][T12912] shmem 212992 [ 303.502942][T12912] file_mapped 0 [ 303.502942][T12912] file_dirty 0 [ 303.502942][T12912] file_writeback 0 [ 303.502942][T12912] anon_thp 14680064 [ 303.502942][T12912] inactive_anon 6467584 [ 303.502942][T12912] active_anon 13410304 [ 303.502942][T12912] inactive_file 135168 [ 303.502942][T12912] active_file 0 [ 303.502942][T12912] unevictable 0 [ 303.502942][T12912] slab_reclaimable 1081344 [ 303.502942][T12912] slab_unreclaimable 1900544 [ 303.502942][T12912] pgfault 24651 [ 303.502942][T12912] pgmajfault 0 [ 303.502942][T12912] workingset_refault 0 [ 303.502942][T12912] workingset_activate 0 [ 303.502942][T12912] workingset_nodereclaim 0 [ 303.502942][T12912] pgrefill 0 [ 303.502942][T12912] pgscan 0 [ 303.502942][T12912] pgsteal 0 [ 303.502942][T12912] pgactivate 0 [ 303.604674][T12912] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12520,uid=0 [ 303.621810][T12912] Memory cgroup out of memory: Killed process 12520 (syz-executor.1) total-vm:60568kB, anon-rss:6204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 303.654696][ T1080] oom_reaper: reaped process 12520 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 303.667132][T12926] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 303.683671][T12926] CPU: 0 PID: 12926 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 303.692726][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.703959][T12926] Call Trace: [ 303.707278][T12926] dump_stack+0x172/0x1f0 [ 303.711717][T12926] dump_header+0x177/0x1152 [ 303.716243][T12926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.722265][T12926] ? ___ratelimit+0x2c8/0x595 [ 303.727046][T12926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.732855][T12926] ? lockdep_hardirqs_on+0x421/0x5e0 [ 303.738316][T12926] ? trace_hardirqs_on+0x67/0x240 [ 303.743332][T12926] ? pagefault_out_of_memory+0x11c/0x11c [ 303.748990][T12926] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 303.754934][T12926] ? ___ratelimit+0x60/0x595 [ 303.759513][T12926] ? do_raw_spin_unlock+0x57/0x270 [ 303.764624][T12926] oom_kill_process.cold+0x10/0x15 [ 303.769755][T12926] out_of_memory+0x334/0x1340 [ 303.774424][T12926] ? oom_killer_disable+0x280/0x280 [ 303.779742][T12926] mem_cgroup_out_of_memory+0x1d8/0x240 [ 303.785302][T12926] ? memcg_stat_show+0xc30/0xc30 [ 303.791042][T12926] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 303.796845][T12926] ? cgroup_file_notify+0x140/0x1b0 [ 303.802053][T12926] memory_max_write+0x262/0x3a0 [ 303.806992][T12926] ? mem_cgroup_write+0x370/0x370 [ 303.812034][T12926] ? lock_acquire+0x190/0x410 [ 303.816709][T12926] ? kernfs_fop_write+0x1df/0x4a0 [ 303.821742][T12926] cgroup_file_write+0x241/0x790 [ 303.826685][T12926] ? mem_cgroup_write+0x370/0x370 [ 303.831976][T12926] ? link_css_set+0x550/0x550 [ 303.836647][T12926] ? link_css_set+0x550/0x550 [ 303.841312][T12926] kernfs_fop_write+0x270/0x4a0 [ 303.846161][T12926] __vfs_write+0x8a/0x110 [ 303.850563][T12926] ? kernfs_fop_open+0xd80/0xd80 [ 303.855659][T12926] vfs_write+0x268/0x5d0 [ 303.859892][T12926] ksys_write+0x14f/0x290 [ 303.864248][T12926] ? __ia32_sys_read+0xb0/0xb0 [ 303.869020][T12926] ? do_syscall_64+0x26/0x760 [ 303.873725][T12926] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.880048][T12926] ? do_syscall_64+0x26/0x760 [ 303.885078][T12926] __x64_sys_write+0x73/0xb0 [ 303.889661][T12926] do_syscall_64+0xfa/0x760 [ 303.894172][T12926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.900063][T12926] RIP: 0033:0x459f49 [ 303.903957][T12926] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.924231][T12926] RSP: 002b:00007f7c016e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.932639][T12926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 303.940693][T12926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 303.948667][T12926] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 303.956640][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c016e66d4 [ 303.964945][T12926] R13: 00000000004ca630 R14: 00000000004e27a8 R15: 00000000ffffffff [ 303.973674][T12926] memory: usage 16884kB, limit 0kB, failcnt 14 [ 303.980148][T12926] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 303.987337][T12926] Memory cgroup stats for /syz1: [ 303.987457][T12926] anon 13271040 [ 303.987457][T12926] file 151552 [ 303.987457][T12926] kernel_stack 262144 [ 303.987457][T12926] slab 2981888 [ 303.987457][T12926] sock 0 [ 303.987457][T12926] shmem 212992 [ 303.987457][T12926] file_mapped 0 [ 303.987457][T12926] file_dirty 0 [ 303.987457][T12926] file_writeback 0 [ 303.987457][T12926] anon_thp 12582912 [ 303.987457][T12926] inactive_anon 176128 [ 303.987457][T12926] active_anon 13410304 [ 303.987457][T12926] inactive_file 135168 [ 303.987457][T12926] active_file 0 [ 303.987457][T12926] unevictable 0 [ 303.987457][T12926] slab_reclaimable 1081344 [ 303.987457][T12926] slab_unreclaimable 1900544 [ 303.987457][T12926] pgfault 24651 [ 303.987457][T12926] pgmajfault 0 [ 303.987457][T12926] workingset_refault 0 [ 303.987457][T12926] workingset_activate 0 [ 303.987457][T12926] workingset_nodereclaim 0 [ 303.987457][T12926] pgrefill 0 [ 303.987457][T12926] pgscan 0 [ 303.987457][T12926] pgsteal 0 [ 303.987457][T12926] pgactivate 0 [ 304.086961][T12926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12912,uid=0 [ 304.102704][T12926] Memory cgroup out of memory: Killed process 12912 (syz-executor.1) total-vm:72848kB, anon-rss:4244kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 304.122672][ T1080] oom_reaper: reaped process 12912 (syz-executor.1), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB 13:10:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:22 executing program 3: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:10:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) 13:10:22 executing program 5: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:10:22 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:10:22 executing program 4: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 304.263427][ T9107] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 304.291713][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 304.298025][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 304.310757][ T9107] CPU: 0 PID: 9107 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 304.319813][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.329876][ T9107] Call Trace: [ 304.333182][ T9107] dump_stack+0x172/0x1f0 [ 304.337527][ T9107] dump_header+0x177/0x1152 [ 304.342061][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 304.347944][ T9107] ? ___ratelimit+0x2c8/0x595 [ 304.352620][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 304.358428][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 304.363714][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 304.368928][ T9107] ? pagefault_out_of_memory+0x11c/0x11c [ 304.374555][ T9107] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 304.380359][ T9107] ? ___ratelimit+0x60/0x595 [ 304.384949][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 304.390077][ T9107] oom_kill_process.cold+0x10/0x15 [ 304.395902][ T9107] out_of_memory+0x334/0x1340 [ 304.400576][ T9107] ? lock_downgrade+0x920/0x920 [ 304.405426][ T9107] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 304.411237][ T9107] ? oom_killer_disable+0x280/0x280 [ 304.416540][ T9107] mem_cgroup_out_of_memory+0x1d8/0x240 [ 304.422341][ T9107] ? memcg_stat_show+0xc30/0xc30 [ 304.427276][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 304.432410][ T9107] ? _raw_spin_unlock+0x28/0x40 [ 304.437262][ T9107] try_charge+0xf4b/0x1440 [ 304.441672][ T9107] ? find_held_lock+0x35/0x130 [ 304.446437][ T9107] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 304.451977][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 304.457515][ T9107] ? find_held_lock+0x35/0x130 [ 304.462280][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 304.467829][ T9107] __memcg_kmem_charge_memcg+0x7c/0x130 [ 304.473381][ T9107] ? memcg_kmem_put_cache+0x50/0x50 [ 304.478584][ T9107] ? get_mem_cgroup_from_mm+0x151/0x310 [ 304.484142][ T9107] __memcg_kmem_charge+0x13a/0x3a0 [ 304.489270][ T9107] __alloc_pages_nodemask+0x4f5/0x910 [ 304.495001][ T9107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 304.501080][ T9107] ? __alloc_pages_slowpath+0x2920/0x2920 [ 304.506808][ T9107] ? percpu_ref_put_many+0xb1/0x180 [ 304.512101][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 304.517395][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 304.522410][ T9107] ? __kasan_check_read+0x11/0x20 [ 304.527437][ T9107] copy_process+0x3f8/0x6880 [ 304.532044][ T9107] ? __kasan_check_read+0x11/0x20 [ 304.537429][ T9107] ? __lock_acquire+0x16f2/0x4a00 [ 304.543144][ T9107] ? __kasan_check_read+0x11/0x20 [ 304.548160][ T9107] ? mark_lock+0xc2/0x1220 [ 304.552590][ T9107] ? __cleanup_sighand+0x60/0x60 [ 304.557549][ T9107] ? find_held_lock+0x35/0x130 [ 304.562610][ T9107] _do_fork+0x146/0xf90 [ 304.566769][ T9107] ? copy_init_mm+0x20/0x20 [ 304.571276][ T9107] ? __kasan_check_read+0x11/0x20 [ 304.576375][ T9107] ? _copy_to_user+0x118/0x160 [ 304.581141][ T9107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 304.587398][ T9107] ? put_timespec64+0xda/0x140 [ 304.592540][ T9107] __x64_sys_clone+0x18d/0x250 [ 304.597312][ T9107] ? __ia32_sys_vfork+0xc0/0xc0 [ 304.602775][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 304.608069][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 304.613106][ T9107] do_syscall_64+0xfa/0x760 [ 304.617615][ T9107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.623521][ T9107] RIP: 0033:0x45851a [ 304.627414][ T9107] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 304.647012][ T9107] RSP: 002b:00007fff8f9996f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 304.656549][ T9107] RAX: ffffffffffffffda RBX: 00007fff8f9996f0 RCX: 000000000045851a [ 304.664515][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 304.672590][ T9107] RBP: 00007fff8f999730 R08: 0000000000000001 R09: 00000000027c0940 [ 304.680563][ T9107] R10: 00000000027c0c10 R11: 0000000000000246 R12: 0000000000000001 [ 304.689242][ T9107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8f999780 13:10:23 executing program 4: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 304.801291][ T9107] memory: usage 12440kB, limit 0kB, failcnt 30 13:10:23 executing program 5: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 304.864805][ T9107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 304.920155][ T9107] Memory cgroup stats for /syz1: [ 304.920403][ T9107] anon 8990720 [ 304.920403][ T9107] file 151552 [ 304.920403][ T9107] kernel_stack 131072 [ 304.920403][ T9107] slab 2981888 [ 304.920403][ T9107] sock 0 [ 304.920403][ T9107] shmem 212992 [ 304.920403][ T9107] file_mapped 0 [ 304.920403][ T9107] file_dirty 0 [ 304.920403][ T9107] file_writeback 0 [ 304.920403][ T9107] anon_thp 8388608 [ 304.920403][ T9107] inactive_anon 176128 [ 304.920403][ T9107] active_anon 9101312 13:10:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) [ 304.920403][ T9107] inactive_file 135168 [ 304.920403][ T9107] active_file 0 [ 304.920403][ T9107] unevictable 0 [ 304.920403][ T9107] slab_reclaimable 1081344 [ 304.920403][ T9107] slab_unreclaimable 1900544 [ 304.920403][ T9107] pgfault 24651 [ 304.920403][ T9107] pgmajfault 0 [ 304.920403][ T9107] workingset_refault 0 [ 304.920403][ T9107] workingset_activate 0 [ 304.920403][ T9107] workingset_nodereclaim 0 [ 304.920403][ T9107] pgrefill 0 [ 304.920403][ T9107] pgscan 0 [ 304.920403][ T9107] pgsteal 0 [ 304.920403][ T9107] pgactivate 0 13:10:23 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:10:23 executing program 3: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:10:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 305.357308][ T9107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11133,uid=0 [ 305.376629][ T9107] Memory cgroup out of memory: Killed process 11133 (syz-executor.1) total-vm:72584kB, anon-rss:2196kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 305.662210][ T9107] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 305.683514][ T9107] CPU: 1 PID: 9107 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 305.692573][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.702927][ T9107] Call Trace: [ 305.706239][ T9107] dump_stack+0x172/0x1f0 [ 305.710580][ T9107] dump_header+0x177/0x1152 [ 305.715086][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.720881][ T9107] ? ___ratelimit+0x2c8/0x595 [ 305.725667][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.731481][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 305.736874][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 305.741901][ T9107] ? pagefault_out_of_memory+0x11c/0x11c [ 305.747540][ T9107] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 305.753365][ T9107] ? ___ratelimit+0x60/0x595 [ 305.757953][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 305.763173][ T9107] oom_kill_process.cold+0x10/0x15 [ 305.768277][ T9107] out_of_memory+0x334/0x1340 [ 305.772949][ T9107] ? lock_downgrade+0x920/0x920 [ 305.777799][ T9107] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 305.783593][ T9107] ? oom_killer_disable+0x280/0x280 [ 305.788784][ T9107] mem_cgroup_out_of_memory+0x1d8/0x240 [ 305.795731][ T9107] ? memcg_stat_show+0xc30/0xc30 [ 305.800676][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 305.805803][ T9107] ? _raw_spin_unlock+0x28/0x40 [ 305.810675][ T9107] try_charge+0xf4b/0x1440 [ 305.815273][ T9107] ? find_held_lock+0x35/0x130 [ 305.820326][ T9107] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 305.825868][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 305.831418][ T9107] ? find_held_lock+0x35/0x130 [ 305.836188][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 305.842192][ T9107] __memcg_kmem_charge_memcg+0x7c/0x130 [ 305.847904][ T9107] ? memcg_kmem_put_cache+0x50/0x50 [ 305.853108][ T9107] ? get_mem_cgroup_from_mm+0x151/0x310 [ 305.858665][ T9107] __memcg_kmem_charge+0x13a/0x3a0 [ 305.863762][ T9107] __alloc_pages_nodemask+0x4f5/0x910 [ 305.869116][ T9107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 305.874654][ T9107] ? __alloc_pages_slowpath+0x2920/0x2920 [ 305.880382][ T9107] ? percpu_ref_put_many+0xb1/0x180 [ 305.886001][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 305.891365][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 305.896384][ T9107] ? __kasan_check_read+0x11/0x20 [ 305.901421][ T9107] copy_process+0x3f8/0x6880 [ 305.905996][ T9107] ? __kasan_check_read+0x11/0x20 [ 305.911006][ T9107] ? __lock_acquire+0x16f2/0x4a00 [ 305.916028][ T9107] ? __kasan_check_read+0x11/0x20 [ 305.921055][ T9107] ? mark_lock+0xc2/0x1220 [ 305.925490][ T9107] ? __cleanup_sighand+0x60/0x60 [ 305.930410][ T9107] ? find_held_lock+0x35/0x130 [ 305.936314][ T9107] _do_fork+0x146/0xf90 [ 305.940591][ T9107] ? copy_init_mm+0x20/0x20 [ 305.945097][ T9107] ? __kasan_check_read+0x11/0x20 [ 305.950100][ T9107] ? _copy_to_user+0x118/0x160 [ 305.954863][ T9107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 305.961120][ T9107] ? put_timespec64+0xda/0x140 [ 305.965891][ T9107] __x64_sys_clone+0x18d/0x250 [ 305.970657][ T9107] ? __ia32_sys_vfork+0xc0/0xc0 [ 305.975520][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 305.980974][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 305.986517][ T9107] do_syscall_64+0xfa/0x760 [ 305.991023][ T9107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.997435][ T9107] RIP: 0033:0x45851a [ 306.001339][ T9107] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 306.021630][ T9107] RSP: 002b:00007fff8f9996f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.030116][ T9107] RAX: ffffffffffffffda RBX: 00007fff8f9996f0 RCX: 000000000045851a [ 306.038083][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 306.046137][ T9107] RBP: 00007fff8f999730 R08: 0000000000000001 R09: 00000000027c0940 [ 306.054110][ T9107] R10: 00000000027c0c10 R11: 0000000000000246 R12: 0000000000000001 [ 306.062088][ T9107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8f999780 [ 306.078271][ T9107] memory: usage 10104kB, limit 0kB, failcnt 36 [ 306.085980][ T9107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 306.100178][ T9107] Memory cgroup stats for /syz1: [ 306.100332][ T9107] anon 6762496 [ 306.100332][ T9107] file 151552 [ 306.100332][ T9107] kernel_stack 131072 [ 306.100332][ T9107] slab 2981888 [ 306.100332][ T9107] sock 0 [ 306.100332][ T9107] shmem 212992 [ 306.100332][ T9107] file_mapped 0 [ 306.100332][ T9107] file_dirty 0 [ 306.100332][ T9107] file_writeback 0 [ 306.100332][ T9107] anon_thp 6291456 [ 306.100332][ T9107] inactive_anon 176128 [ 306.100332][ T9107] active_anon 6873088 [ 306.100332][ T9107] inactive_file 135168 [ 306.100332][ T9107] active_file 0 [ 306.100332][ T9107] unevictable 0 [ 306.100332][ T9107] slab_reclaimable 1081344 [ 306.100332][ T9107] slab_unreclaimable 1900544 [ 306.100332][ T9107] pgfault 24651 [ 306.100332][ T9107] pgmajfault 0 [ 306.100332][ T9107] workingset_refault 0 [ 306.100332][ T9107] workingset_activate 0 [ 306.100332][ T9107] workingset_nodereclaim 0 [ 306.100332][ T9107] pgrefill 0 [ 306.100332][ T9107] pgscan 0 [ 306.100332][ T9107] pgsteal 0 [ 306.100332][ T9107] pgactivate 0 [ 306.207039][ T9107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11678,uid=0 [ 306.227221][ T9107] Memory cgroup out of memory: Killed process 11678 (syz-executor.1) total-vm:72716kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 306.256796][ T9107] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 306.275066][ T9107] CPU: 0 PID: 9107 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 306.284047][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.294206][ T9107] Call Trace: [ 306.297509][ T9107] dump_stack+0x172/0x1f0 [ 306.302234][ T9107] dump_header+0x177/0x1152 [ 306.302333][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.302348][ T9107] ? ___ratelimit+0x2c8/0x595 [ 306.302362][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.302377][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 306.302391][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 306.302410][ T9107] ? pagefault_out_of_memory+0x11c/0x11c [ 306.312706][ T9107] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 306.312721][ T9107] ? ___ratelimit+0x60/0x595 [ 306.312739][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 306.312757][ T9107] oom_kill_process.cold+0x10/0x15 [ 306.312773][ T9107] out_of_memory+0x334/0x1340 [ 306.312790][ T9107] ? lock_downgrade+0x920/0x920 [ 306.371570][ T9107] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 306.377383][ T9107] ? oom_killer_disable+0x280/0x280 [ 306.382588][ T9107] mem_cgroup_out_of_memory+0x1d8/0x240 [ 306.388125][ T9107] ? memcg_stat_show+0xc30/0xc30 [ 306.393062][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 306.398160][ T9107] ? _raw_spin_unlock+0x28/0x40 [ 306.403132][ T9107] try_charge+0xf4b/0x1440 [ 306.407545][ T9107] ? find_held_lock+0x35/0x130 [ 306.412313][ T9107] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 306.417856][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 306.423408][ T9107] ? find_held_lock+0x35/0x130 [ 306.428176][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 306.433979][ T9107] __memcg_kmem_charge_memcg+0x7c/0x130 [ 306.439523][ T9107] ? memcg_kmem_put_cache+0x50/0x50 [ 306.444729][ T9107] ? get_mem_cgroup_from_mm+0x151/0x310 [ 306.450284][ T9107] __memcg_kmem_charge+0x13a/0x3a0 [ 306.455394][ T9107] __alloc_pages_nodemask+0x4f5/0x910 [ 306.460763][ T9107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 306.466304][ T9107] ? __alloc_pages_slowpath+0x2920/0x2920 [ 306.472031][ T9107] ? percpu_ref_put_many+0xb1/0x180 [ 306.477312][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 306.482620][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 306.487639][ T9107] ? __kasan_check_read+0x11/0x20 [ 306.492656][ T9107] copy_process+0x3f8/0x6880 [ 306.497528][ T9107] ? __kasan_check_read+0x11/0x20 [ 306.502549][ T9107] ? __lock_acquire+0x16f2/0x4a00 [ 306.507583][ T9107] ? __kasan_check_read+0x11/0x20 [ 306.512604][ T9107] ? mark_lock+0xc2/0x1220 [ 306.517016][ T9107] ? __cleanup_sighand+0x60/0x60 [ 306.521989][ T9107] ? find_held_lock+0x35/0x130 [ 306.526763][ T9107] _do_fork+0x146/0xf90 [ 306.530926][ T9107] ? copy_init_mm+0x20/0x20 [ 306.535430][ T9107] ? __kasan_check_read+0x11/0x20 [ 306.540445][ T9107] ? _copy_to_user+0x118/0x160 [ 306.545198][ T9107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.551431][ T9107] ? put_timespec64+0xda/0x140 [ 306.556225][ T9107] __x64_sys_clone+0x18d/0x250 [ 306.561121][ T9107] ? __ia32_sys_vfork+0xc0/0xc0 [ 306.565975][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 306.571263][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 306.576283][ T9107] do_syscall_64+0xfa/0x760 [ 306.580786][ T9107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.586663][ T9107] RIP: 0033:0x45851a [ 306.590818][ T9107] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 306.610415][ T9107] RSP: 002b:00007fff8f9996f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.619163][ T9107] RAX: ffffffffffffffda RBX: 00007fff8f9996f0 RCX: 000000000045851a [ 306.627117][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 306.635173][ T9107] RBP: 00007fff8f999730 R08: 0000000000000001 R09: 00000000027c0940 [ 306.643665][ T9107] R10: 00000000027c0c10 R11: 0000000000000246 R12: 0000000000000001 [ 306.651796][ T9107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8f999780 [ 306.662052][ T9107] memory: usage 7768kB, limit 0kB, failcnt 42 [ 306.668421][ T9107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 306.678232][ T9107] Memory cgroup stats for /syz1: [ 306.678347][ T9107] anon 4558848 [ 306.678347][ T9107] file 151552 [ 306.678347][ T9107] kernel_stack 131072 [ 306.678347][ T9107] slab 2981888 [ 306.678347][ T9107] sock 0 [ 306.678347][ T9107] shmem 212992 [ 306.678347][ T9107] file_mapped 0 [ 306.678347][ T9107] file_dirty 0 [ 306.678347][ T9107] file_writeback 0 [ 306.678347][ T9107] anon_thp 4194304 [ 306.678347][ T9107] inactive_anon 176128 [ 306.678347][ T9107] active_anon 4558848 [ 306.678347][ T9107] inactive_file 135168 [ 306.678347][ T9107] active_file 0 [ 306.678347][ T9107] unevictable 0 [ 306.678347][ T9107] slab_reclaimable 1081344 [ 306.678347][ T9107] slab_unreclaimable 1900544 [ 306.678347][ T9107] pgfault 24651 [ 306.678347][ T9107] pgmajfault 0 [ 306.678347][ T9107] workingset_refault 0 [ 306.678347][ T9107] workingset_activate 0 [ 306.678347][ T9107] workingset_nodereclaim 0 [ 306.678347][ T9107] pgrefill 0 [ 306.678347][ T9107] pgscan 0 [ 306.678347][ T9107] pgsteal 0 [ 306.678347][ T9107] pgactivate 0 [ 306.777945][ T9107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11650,uid=0 [ 306.793524][ T9107] Memory cgroup out of memory: Killed process 11650 (syz-executor.1) total-vm:72716kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 306.816853][ T1080] oom_reaper: reaped process 11650 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 306.818067][ T9107] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 306.840622][ T9107] CPU: 0 PID: 9107 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 306.849557][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.859703][ T9107] Call Trace: [ 306.862987][ T9107] dump_stack+0x172/0x1f0 [ 306.867387][ T9107] dump_header+0x177/0x1152 [ 306.873380][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.879575][ T9107] ? ___ratelimit+0x2c8/0x595 [ 306.884242][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.890491][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 306.895794][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 306.900836][ T9107] ? pagefault_out_of_memory+0x11c/0x11c [ 306.906797][ T9107] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 306.912784][ T9107] ? ___ratelimit+0x60/0x595 [ 306.917383][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 306.922498][ T9107] oom_kill_process.cold+0x10/0x15 [ 306.927608][ T9107] out_of_memory+0x334/0x1340 [ 306.932287][ T9107] ? lock_downgrade+0x920/0x920 [ 306.938023][ T9107] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 306.943827][ T9107] ? oom_killer_disable+0x280/0x280 [ 306.949019][ T9107] mem_cgroup_out_of_memory+0x1d8/0x240 [ 306.954549][ T9107] ? memcg_stat_show+0xc30/0xc30 [ 306.959474][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 306.964930][ T9107] ? _raw_spin_unlock+0x28/0x40 [ 306.969939][ T9107] try_charge+0xf4b/0x1440 [ 306.974337][ T9107] ? find_held_lock+0x35/0x130 [ 306.979108][ T9107] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 306.984856][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 306.990539][ T9107] ? find_held_lock+0x35/0x130 [ 306.995301][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 307.000852][ T9107] __memcg_kmem_charge_memcg+0x7c/0x130 [ 307.006403][ T9107] ? memcg_kmem_put_cache+0x50/0x50 [ 307.012021][ T9107] ? get_mem_cgroup_from_mm+0x151/0x310 [ 307.017925][ T9107] __memcg_kmem_charge+0x13a/0x3a0 [ 307.023283][ T9107] __alloc_pages_nodemask+0x4f5/0x910 [ 307.028656][ T9107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 307.034448][ T9107] ? __alloc_pages_slowpath+0x2920/0x2920 [ 307.040713][ T9107] ? percpu_ref_put_many+0xb1/0x180 [ 307.047131][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 307.052589][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 307.057667][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.062806][ T9107] copy_process+0x3f8/0x6880 [ 307.067406][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.072434][ T9107] ? __lock_acquire+0x16f2/0x4a00 [ 307.078807][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.083831][ T9107] ? mark_lock+0xc2/0x1220 [ 307.088353][ T9107] ? __cleanup_sighand+0x60/0x60 [ 307.093380][ T9107] ? find_held_lock+0x35/0x130 [ 307.098165][ T9107] _do_fork+0x146/0xf90 [ 307.102332][ T9107] ? copy_init_mm+0x20/0x20 [ 307.106929][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.112681][ T9107] ? _copy_to_user+0x118/0x160 [ 307.118169][ T9107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.124427][ T9107] ? put_timespec64+0xda/0x140 [ 307.129212][ T9107] __x64_sys_clone+0x18d/0x250 [ 307.133984][ T9107] ? __ia32_sys_vfork+0xc0/0xc0 [ 307.138840][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 307.144199][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 307.149300][ T9107] do_syscall_64+0xfa/0x760 [ 307.153804][ T9107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.159694][ T9107] RIP: 0033:0x45851a [ 307.164009][ T9107] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 307.184836][ T9107] RSP: 002b:00007fff8f9996f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.193241][ T9107] RAX: ffffffffffffffda RBX: 00007fff8f9996f0 RCX: 000000000045851a [ 307.201640][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 307.209725][ T9107] RBP: 00007fff8f999730 R08: 0000000000000001 R09: 00000000027c0940 [ 307.217688][ T9107] R10: 00000000027c0c10 R11: 0000000000000246 R12: 0000000000000001 [ 307.225839][ T9107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8f999780 [ 307.234292][ T9107] memory: usage 5292kB, limit 0kB, failcnt 48 [ 307.240370][ T9107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 307.248472][ T9107] Memory cgroup stats for /syz1: [ 307.248596][ T9107] anon 2330624 [ 307.248596][ T9107] file 151552 [ 307.248596][ T9107] kernel_stack 65536 [ 307.248596][ T9107] slab 2981888 [ 307.248596][ T9107] sock 0 [ 307.248596][ T9107] shmem 212992 [ 307.248596][ T9107] file_mapped 0 [ 307.248596][ T9107] file_dirty 0 [ 307.248596][ T9107] file_writeback 0 [ 307.248596][ T9107] anon_thp 2097152 [ 307.248596][ T9107] inactive_anon 176128 [ 307.248596][ T9107] active_anon 2330624 [ 307.248596][ T9107] inactive_file 135168 [ 307.248596][ T9107] active_file 0 [ 307.248596][ T9107] unevictable 0 [ 307.248596][ T9107] slab_reclaimable 1081344 [ 307.248596][ T9107] slab_unreclaimable 1900544 [ 307.248596][ T9107] pgfault 24651 [ 307.248596][ T9107] pgmajfault 0 [ 307.248596][ T9107] workingset_refault 0 [ 307.248596][ T9107] workingset_activate 0 [ 307.248596][ T9107] workingset_nodereclaim 0 [ 307.248596][ T9107] pgrefill 0 [ 307.248596][ T9107] pgscan 0 [ 307.248596][ T9107] pgsteal 0 [ 307.248596][ T9107] pgactivate 0 [ 307.349659][ T9107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11622,uid=0 [ 307.366058][ T9107] Memory cgroup out of memory: Killed process 11622 (syz-executor.1) total-vm:72584kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 307.406508][ T9107] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 307.418764][ T9107] CPU: 0 PID: 9107 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 307.427919][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.438089][ T9107] Call Trace: [ 307.441371][ T9107] dump_stack+0x172/0x1f0 [ 307.445898][ T9107] dump_header+0x177/0x1152 [ 307.450402][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.456204][ T9107] ? ___ratelimit+0x2c8/0x595 [ 307.460865][ T9107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.466665][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 307.471933][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 307.476965][ T9107] ? pagefault_out_of_memory+0x11c/0x11c [ 307.483052][ T9107] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 307.489040][ T9107] ? ___ratelimit+0x60/0x595 [ 307.493609][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 307.498706][ T9107] oom_kill_process.cold+0x10/0x15 [ 307.503801][ T9107] out_of_memory+0x334/0x1340 [ 307.508456][ T9107] ? lock_downgrade+0x920/0x920 [ 307.513287][ T9107] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 307.519088][ T9107] ? oom_killer_disable+0x280/0x280 [ 307.524278][ T9107] mem_cgroup_out_of_memory+0x1d8/0x240 [ 307.529887][ T9107] ? memcg_stat_show+0xc30/0xc30 [ 307.534817][ T9107] ? do_raw_spin_unlock+0x57/0x270 [ 307.539905][ T9107] ? _raw_spin_unlock+0x28/0x40 [ 307.544958][ T9107] try_charge+0xf4b/0x1440 [ 307.549369][ T9107] ? find_held_lock+0x35/0x130 [ 307.554138][ T9107] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 307.559664][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 307.565196][ T9107] ? find_held_lock+0x35/0x130 [ 307.569945][ T9107] ? get_mem_cgroup_from_mm+0x139/0x310 [ 307.575483][ T9107] __memcg_kmem_charge_memcg+0x7c/0x130 [ 307.581018][ T9107] ? memcg_kmem_put_cache+0x50/0x50 [ 307.586206][ T9107] ? get_mem_cgroup_from_mm+0x151/0x310 [ 307.591742][ T9107] __memcg_kmem_charge+0x13a/0x3a0 [ 307.596835][ T9107] __alloc_pages_nodemask+0x4f5/0x910 [ 307.602186][ T9107] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 307.607718][ T9107] ? __alloc_pages_slowpath+0x2920/0x2920 [ 307.613418][ T9107] ? percpu_ref_put_many+0xb1/0x180 [ 307.618597][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 307.623861][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 307.628872][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.633977][ T9107] copy_process+0x3f8/0x6880 [ 307.638551][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.643569][ T9107] ? __lock_acquire+0x16f2/0x4a00 [ 307.648578][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.653636][ T9107] ? mark_lock+0xc2/0x1220 [ 307.658049][ T9107] ? __cleanup_sighand+0x60/0x60 [ 307.663000][ T9107] ? find_held_lock+0x35/0x130 [ 307.667855][ T9107] _do_fork+0x146/0xf90 [ 307.672008][ T9107] ? copy_init_mm+0x20/0x20 [ 307.676499][ T9107] ? __kasan_check_read+0x11/0x20 [ 307.681600][ T9107] ? _copy_to_user+0x118/0x160 [ 307.686359][ T9107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.692578][ T9107] ? put_timespec64+0xda/0x140 [ 307.697324][ T9107] __x64_sys_clone+0x18d/0x250 [ 307.702069][ T9107] ? __ia32_sys_vfork+0xc0/0xc0 [ 307.707028][ T9107] ? lockdep_hardirqs_on+0x421/0x5e0 [ 307.712853][ T9107] ? trace_hardirqs_on+0x67/0x240 [ 307.717873][ T9107] do_syscall_64+0xfa/0x760 [ 307.722559][ T9107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.728456][ T9107] RIP: 0033:0x45851a [ 307.732345][ T9107] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 307.752041][ T9107] RSP: 002b:00007fff8f9996f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.760459][ T9107] RAX: ffffffffffffffda RBX: 00007fff8f9996f0 RCX: 000000000045851a [ 307.768564][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 307.776591][ T9107] RBP: 00007fff8f999730 R08: 0000000000000001 R09: 00000000027c0940 [ 307.784563][ T9107] R10: 00000000027c0c10 R11: 0000000000000246 R12: 0000000000000001 [ 307.792517][ T9107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8f999780 [ 307.808294][ T9107] memory: usage 2960kB, limit 0kB, failcnt 55 [ 307.815096][ T9107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 307.825278][ T9107] Memory cgroup stats for /syz1: [ 307.825351][ T9107] anon 106496 [ 307.825351][ T9107] file 151552 [ 307.825351][ T9107] kernel_stack 0 [ 307.825351][ T9107] slab 2981888 [ 307.825351][ T9107] sock 0 [ 307.825351][ T9107] shmem 212992 [ 307.825351][ T9107] file_mapped 0 [ 307.825351][ T9107] file_dirty 0 [ 307.825351][ T9107] file_writeback 0 [ 307.825351][ T9107] anon_thp 0 [ 307.825351][ T9107] inactive_anon 176128 [ 307.825351][ T9107] active_anon 106496 [ 307.825351][ T9107] inactive_file 135168 [ 307.825351][ T9107] active_file 0 [ 307.825351][ T9107] unevictable 0 [ 307.825351][ T9107] slab_reclaimable 1081344 [ 307.825351][ T9107] slab_unreclaimable 1900544 [ 307.825351][ T9107] pgfault 24651 [ 307.825351][ T9107] pgmajfault 0 [ 307.825351][ T9107] workingset_refault 0 [ 307.825351][ T9107] workingset_activate 0 [ 307.825351][ T9107] workingset_nodereclaim 0 [ 307.825351][ T9107] pgrefill 0 [ 307.825351][ T9107] pgscan 0 [ 307.825351][ T9107] pgsteal 0 [ 307.825351][ T9107] pgactivate 0 [ 307.925428][ T9107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9107,uid=0 [ 307.940993][ T9107] Memory cgroup out of memory: Killed process 9107 (syz-executor.1) total-vm:72452kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 307.959182][ T1080] oom_reaper: reaped process 9107 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 13:10:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) 13:10:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) [ 308.391831][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 308.451179][ T9115] CPU: 0 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 308.460333][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.470413][ T9115] Call Trace: [ 308.473721][ T9115] dump_stack+0x172/0x1f0 [ 308.478076][ T9115] dump_header+0x177/0x1152 [ 308.482602][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 308.488444][ T9115] ? ___ratelimit+0x2c8/0x595 [ 308.493133][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 308.498961][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 308.504269][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 308.509325][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 308.514969][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 308.520801][ T9115] ? ___ratelimit+0x60/0x595 [ 308.525403][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 308.530532][ T9115] oom_kill_process.cold+0x10/0x15 [ 308.535655][ T9115] out_of_memory+0x334/0x1340 [ 308.540439][ T9115] ? lock_downgrade+0x920/0x920 [ 308.546468][ T9115] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 308.552300][ T9115] ? oom_killer_disable+0x280/0x280 [ 308.557635][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 308.563901][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 308.569938][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 308.575097][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 308.579975][ T9115] try_charge+0xf4b/0x1440 [ 308.584427][ T9115] ? find_held_lock+0x35/0x130 [ 308.589426][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 308.595420][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 308.601156][ T9115] ? find_held_lock+0x35/0x130 [ 308.606199][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 308.611773][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 308.617451][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 308.623452][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 308.629138][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 308.634350][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 308.640050][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 308.645980][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 308.652435][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 308.657741][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 308.663242][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 308.668508][ T9115] ? __kasan_check_read+0x11/0x20 [ 308.675056][ T9115] copy_process+0x3f8/0x6880 [ 308.679687][ T9115] ? __kasan_check_read+0x11/0x20 [ 308.684729][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 308.689771][ T9115] ? __kasan_check_read+0x11/0x20 [ 308.695088][ T9115] ? mark_lock+0xc2/0x1220 [ 308.699560][ T9115] ? __cleanup_sighand+0x60/0x60 [ 308.704788][ T9115] ? find_held_lock+0x35/0x130 [ 308.709589][ T9115] _do_fork+0x146/0xf90 [ 308.713765][ T9115] ? copy_init_mm+0x20/0x20 [ 308.718287][ T9115] ? __kasan_check_read+0x11/0x20 [ 308.723411][ T9115] ? _copy_to_user+0x118/0x160 [ 308.728286][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 308.734721][ T9115] ? put_timespec64+0xda/0x140 [ 308.739519][ T9115] __x64_sys_clone+0x18d/0x250 [ 308.744295][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 308.749162][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 308.754457][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 308.759676][ T9115] do_syscall_64+0xfa/0x760 [ 308.764409][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.770309][ T9115] RIP: 0033:0x45851a [ 308.774211][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 308.794088][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.802508][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 308.810878][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 308.819067][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 308.827044][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 308.836238][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 308.844776][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.850676][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:10:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 308.912101][ T9115] memory: usage 20544kB, limit 0kB, failcnt 16 [ 308.918322][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 309.001509][ T9115] Memory cgroup stats for /syz4: [ 309.001624][ T9115] anon 15708160 [ 309.001624][ T9115] file 69632 [ 309.001624][ T9115] kernel_stack 262144 [ 309.001624][ T9115] slab 4161536 [ 309.001624][ T9115] sock 0 [ 309.001624][ T9115] shmem 0 [ 309.001624][ T9115] file_mapped 0 [ 309.001624][ T9115] file_dirty 135168 [ 309.001624][ T9115] file_writeback 0 [ 309.001624][ T9115] anon_thp 14680064 [ 309.001624][ T9115] inactive_anon 0 [ 309.001624][ T9115] active_anon 15622144 [ 309.001624][ T9115] inactive_file 0 13:10:27 executing program 0: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 309.001624][ T9115] active_file 0 [ 309.001624][ T9115] unevictable 0 [ 309.001624][ T9115] slab_reclaimable 1486848 [ 309.001624][ T9115] slab_unreclaimable 2674688 [ 309.001624][ T9115] pgfault 14619 [ 309.001624][ T9115] pgmajfault 0 [ 309.001624][ T9115] workingset_refault 0 [ 309.001624][ T9115] workingset_activate 0 [ 309.001624][ T9115] workingset_nodereclaim 0 [ 309.001624][ T9115] pgrefill 0 [ 309.001624][ T9115] pgscan 0 [ 309.001624][ T9115] pgsteal 0 [ 309.001624][ T9115] pgactivate 0 13:10:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) 13:10:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) 13:10:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 309.610168][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11623,uid=0 13:10:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0xffffffffffffffcf, 0x5, 0x3, 0xffff, 0x9}) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000640)=0xcabe, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="630183caec23e2680cbdb37f1a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x6) writev(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)="00e26114715756c6e7f40c74a845c25dae340fb81b6b5ba2b0a5fff4c5b0486d53912795d379e25b0a9dae51fe7e2f1fb44ca0c558ac8b6be9116c1963c589f3801b7ab2eb67529d83d385428a5ebf402ecc30d1fa1a5a7389d9ea0091", 0x5d}, {&(0x7f0000000340)="a401a7f87f0cd5a2fae57e5acfdd15e8f7998cbc5db55cb06f3d397d5e4813ac84c495a4c03db3b610", 0x29}], 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x8}, &(0x7f0000000600)=0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FICLONE(r2, 0x40049409, r4) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffc) r8 = getpid() rt_sigqueueinfo(r8, 0xf, &(0x7f0000000740)={0x38, 0x8d, 0x9dc}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8cb50470eae246bcb556640a8ab7eecb74c6470daae2b000358145e45f43cd191b57a633fc7d494a905680930d2a241567900ac5232da5bed66fbcfa2be4d1f667ac8911") ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000480)) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000001740)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}}}, 0x48) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001780)=0x400, 0x4) [ 309.650728][ T9115] Memory cgroup out of memory: Killed process 11623 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 309.722995][ T9120] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 309.755075][ T9120] CPU: 0 PID: 9120 Comm: syz-executor.5 Not tainted 5.4.0-rc5-next-20191029 #0 [ 309.764043][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.774103][ T9120] Call Trace: [ 309.777407][ T9120] dump_stack+0x172/0x1f0 [ 309.781755][ T9120] dump_header+0x177/0x1152 [ 309.786277][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 309.792093][ T9120] ? ___ratelimit+0x2c8/0x595 [ 309.796771][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 309.802584][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 309.807873][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 309.812903][ T9120] ? pagefault_out_of_memory+0x11c/0x11c [ 309.818534][ T9120] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 309.824342][ T9120] ? ___ratelimit+0x60/0x595 [ 309.828932][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 309.834054][ T9120] oom_kill_process.cold+0x10/0x15 [ 309.839172][ T9120] out_of_memory+0x334/0x1340 [ 309.844199][ T9120] ? lock_downgrade+0x920/0x920 [ 309.849057][ T9120] ? oom_killer_disable+0x280/0x280 [ 309.854271][ T9120] mem_cgroup_out_of_memory+0x1d8/0x240 [ 309.859828][ T9120] ? memcg_stat_show+0xc30/0xc30 [ 309.864778][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 309.869896][ T9120] ? _raw_spin_unlock+0x28/0x40 [ 309.874760][ T9120] try_charge+0xf4b/0x1440 [ 309.879185][ T9120] ? find_held_lock+0x35/0x130 [ 309.883964][ T9120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 309.889505][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 309.895045][ T9120] ? find_held_lock+0x35/0x130 [ 309.899814][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 309.905454][ T9120] __memcg_kmem_charge_memcg+0x7c/0x130 [ 309.910997][ T9120] ? memcg_kmem_put_cache+0x50/0x50 [ 309.916203][ T9120] ? get_mem_cgroup_from_mm+0x151/0x310 [ 309.921738][ T9120] __memcg_kmem_charge+0x13a/0x3a0 [ 309.926837][ T9120] __alloc_pages_nodemask+0x4f5/0x910 [ 309.932199][ T9120] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 309.937738][ T9120] ? __alloc_pages_slowpath+0x2920/0x2920 [ 309.943450][ T9120] ? percpu_ref_put_many+0xb1/0x180 [ 309.948639][ T9120] copy_process+0x3f8/0x6880 [ 309.953556][ T9120] ? __kasan_check_read+0x11/0x20 [ 309.958574][ T9120] ? __lock_acquire+0x16f2/0x4a00 [ 309.963577][ T9120] ? __kasan_check_read+0x11/0x20 [ 309.968581][ T9120] ? mark_lock+0xc2/0x1220 [ 309.972980][ T9120] ? __cleanup_sighand+0x60/0x60 [ 309.977898][ T9120] ? find_held_lock+0x35/0x130 [ 309.982909][ T9120] _do_fork+0x146/0xf90 [ 309.987058][ T9120] ? copy_init_mm+0x20/0x20 [ 309.991547][ T9120] ? __kasan_check_read+0x11/0x20 [ 309.996555][ T9120] ? _copy_to_user+0x118/0x160 [ 310.001301][ T9120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.008229][ T9120] ? put_timespec64+0xda/0x140 [ 310.013034][ T9120] __x64_sys_clone+0x18d/0x250 [ 310.017809][ T9120] ? __ia32_sys_vfork+0xc0/0xc0 [ 310.022806][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 310.028104][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 310.033134][ T9120] do_syscall_64+0xfa/0x760 [ 310.037652][ T9120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.043535][ T9120] RIP: 0033:0x45851a [ 310.047429][ T9120] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 310.067487][ T9120] RSP: 002b:00007ffc25433ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.076921][ T9120] RAX: ffffffffffffffda RBX: 00007ffc25433ab0 RCX: 000000000045851a [ 310.084876][ T9120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 310.092852][ T9120] RBP: 00007ffc25433af0 R08: 0000000000000001 R09: 0000000001ace940 [ 310.100804][ T9120] R10: 0000000001acec10 R11: 0000000000000246 R12: 0000000000000001 [ 310.108768][ T9120] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc25433b40 [ 310.119663][ T9120] memory: usage 17844kB, limit 0kB, failcnt 9 [ 310.125943][ T9120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 310.132913][ T9120] Memory cgroup stats for /syz5: [ 310.133008][ T9120] anon 13537280 [ 310.133008][ T9120] file 32768 [ 310.133008][ T9120] kernel_stack 262144 [ 310.133008][ T9120] slab 3551232 [ 310.133008][ T9120] sock 0 [ 310.133008][ T9120] shmem 0 [ 310.133008][ T9120] file_mapped 0 [ 310.133008][ T9120] file_dirty 135168 [ 310.133008][ T9120] file_writeback 0 [ 310.133008][ T9120] anon_thp 4194304 [ 310.133008][ T9120] inactive_anon 12898304 [ 310.133008][ T9120] active_anon 765952 [ 310.133008][ T9120] inactive_file 0 [ 310.133008][ T9120] active_file 0 [ 310.133008][ T9120] unevictable 122880 [ 310.133008][ T9120] slab_reclaimable 1216512 [ 310.133008][ T9120] slab_unreclaimable 2334720 [ 310.133008][ T9120] pgfault 30030 [ 310.133008][ T9120] pgmajfault 0 [ 310.133008][ T9120] workingset_refault 0 [ 310.133008][ T9120] workingset_activate 0 [ 310.133008][ T9120] workingset_nodereclaim 0 [ 310.133008][ T9120] pgrefill 0 [ 310.133008][ T9120] pgscan 0 13:10:29 executing program 2: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 310.133008][ T9120] pgsteal 0 [ 310.133008][ T9120] pgactivate 0 [ 310.230851][ T9120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12422,uid=0 [ 310.247430][ T9120] Memory cgroup out of memory: Killed process 12422 (syz-executor.5) total-vm:60568kB, anon-rss:6208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 310.286037][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 310.300114][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 310.309153][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.319301][ T9112] Call Trace: [ 310.322577][ T9112] dump_stack+0x172/0x1f0 [ 310.326899][ T9112] dump_header+0x177/0x1152 [ 310.331434][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.337216][ T9112] ? ___ratelimit+0x2c8/0x595 [ 310.341872][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.347709][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 310.352972][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 310.358039][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 310.363660][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 310.369453][ T9112] ? ___ratelimit+0x60/0x595 [ 310.374027][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 310.379120][ T9112] oom_kill_process.cold+0x10/0x15 [ 310.384311][ T9112] out_of_memory+0x334/0x1340 [ 310.388979][ T9112] ? oom_killer_disable+0x280/0x280 [ 310.394170][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 310.399699][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 310.404625][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 310.409723][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 310.414574][ T9112] try_charge+0xf4b/0x1440 [ 310.418981][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 310.424510][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 310.430040][ T9112] ? cache_grow_begin+0x122/0xd00 [ 310.435135][ T9112] ? find_held_lock+0x35/0x130 [ 310.439886][ T9112] ? cache_grow_begin+0x122/0xd00 [ 310.444910][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 310.450495][ T9112] ? lock_downgrade+0x920/0x920 [ 310.456359][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 310.461693][ T9112] ? __kasan_check_read+0x11/0x20 [ 310.466711][ T9112] cache_grow_begin+0x61a/0xd00 [ 310.471555][ T9112] ? write_comp_data+0x61/0x70 [ 310.476316][ T9112] ? mempolicy_slab_node+0x139/0x390 [ 310.481707][ T9112] fallback_alloc+0x1f8/0x2d0 [ 310.486475][ T9112] ____cache_alloc_node+0x1bc/0x1d0 [ 310.491669][ T9112] ? trace_hardirqs_off+0x62/0x240 [ 310.496882][ T9112] kmem_cache_alloc+0x1ef/0x710 [ 310.501720][ T9112] ? lock_downgrade+0x920/0x920 [ 310.506594][ T9112] ? rwlock_bug.part.0+0x90/0x90 [ 310.511527][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 310.516725][ T9112] ext4_alloc_inode+0x1f/0x640 [ 310.521477][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 310.526661][ T9112] alloc_inode+0x68/0x1e0 [ 310.530996][ T9112] iget_locked+0x1a6/0x4b0 [ 310.535414][ T9112] __ext4_iget+0x265/0x3e20 [ 310.539909][ T9112] ? ext4_get_projid+0x190/0x190 [ 310.544829][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 310.550374][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 310.556489][ T9112] ? d_alloc_parallel+0xa6e/0x1c00 [ 310.561604][ T9112] ext4_lookup+0x3b1/0x7a0 [ 310.566007][ T9112] ? ext4_cross_rename+0x1430/0x1430 [ 310.571373][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 310.576467][ T9112] ? __kasan_check_read+0x11/0x20 [ 310.581474][ T9112] ? lockdep_init_map+0x1be/0x6d0 [ 310.586478][ T9112] __lookup_slow+0x279/0x500 [ 310.591053][ T9112] ? vfs_unlink+0x620/0x620 [ 310.595549][ T9112] lookup_slow+0x58/0x80 [ 310.599786][ T9112] path_mountpoint+0x5d2/0x1e50 [ 310.605145][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 310.610677][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 310.616722][ T9112] ? path_openat+0x4710/0x4710 [ 310.621468][ T9112] filename_mountpoint+0x18e/0x390 [ 310.626558][ T9112] ? filename_parentat.isra.0+0x410/0x410 [ 310.632294][ T9112] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 310.638433][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.644670][ T9112] ? __phys_addr_symbol+0x30/0x70 [ 310.650474][ T9112] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 310.657495][ T9112] ? __check_object_size+0x3d/0x437 [ 310.662742][ T9112] ? strncpy_from_user+0x2b4/0x400 [ 310.668103][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.674325][ T9112] ? getname_flags+0x277/0x5b0 [ 310.679071][ T9112] user_path_mountpoint_at+0x3a/0x50 [ 310.684351][ T9112] ksys_umount+0x164/0xef0 [ 310.688755][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.694987][ T9112] ? __detach_mounts+0x290/0x290 [ 310.699903][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 310.705348][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 310.710785][ T9112] ? do_syscall_64+0x26/0x760 [ 310.715443][ T9112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.721533][ T9112] ? do_syscall_64+0x26/0x760 [ 310.726200][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 310.731474][ T9112] __x64_sys_umount+0x54/0x80 [ 310.736131][ T9112] do_syscall_64+0xfa/0x760 [ 310.740611][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.746738][ T9112] RIP: 0033:0x45c977 [ 310.750611][ T9112] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.770194][ T9112] RSP: 002b:00007ffe1a491008 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 310.778604][ T9112] RAX: ffffffffffffffda RBX: 000000000004b884 RCX: 000000000045c977 [ 310.786557][ T9112] RDX: 0000000000403a70 RSI: 0000000000000002 RDI: 00007ffe1a4910b0 [ 310.794516][ T9112] RBP: 00000000000001cf R08: 0000000000000000 R09: 0000000000000010 [ 310.802467][ T9112] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe1a492140 [ 310.810415][ T9112] R13: 00000000019f8940 R14: 0000000000000000 R15: 00007ffe1a492140 [ 310.827761][ T9112] memory: usage 63160kB, limit 0kB, failcnt 16 [ 310.834324][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 310.842275][ T9112] Memory cgroup stats for /syz3: [ 310.842693][ T9112] anon 56840192 [ 310.842693][ T9112] file 36864 [ 310.842693][ T9112] kernel_stack 655360 [ 310.842693][ T9112] slab 4894720 [ 310.842693][ T9112] sock 0 [ 310.842693][ T9112] shmem 0 [ 310.842693][ T9112] file_mapped 0 [ 310.842693][ T9112] file_dirty 0 [ 310.842693][ T9112] file_writeback 0 [ 310.842693][ T9112] anon_thp 31457280 [ 310.842693][ T9112] inactive_anon 25796608 [ 310.842693][ T9112] active_anon 31014912 [ 310.842693][ T9112] inactive_file 32768 [ 310.842693][ T9112] active_file 24576 [ 310.842693][ T9112] unevictable 45056 [ 310.842693][ T9112] slab_reclaimable 1216512 [ 310.842693][ T9112] slab_unreclaimable 3678208 [ 310.842693][ T9112] pgfault 19437 [ 310.842693][ T9112] pgmajfault 0 [ 310.842693][ T9112] workingset_refault 0 [ 310.842693][ T9112] workingset_activate 0 [ 310.842693][ T9112] workingset_nodereclaim 0 [ 310.842693][ T9112] pgrefill 202 [ 310.842693][ T9112] pgscan 734 [ 310.842693][ T9112] pgsteal 565 [ 310.940402][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10824,uid=0 [ 310.959950][ T9112] Memory cgroup out of memory: Killed process 10824 (syz-executor.3) total-vm:72584kB, anon-rss:6300kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 310.995689][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 311.023189][ T9115] CPU: 1 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 311.032150][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.042215][ T9115] Call Trace: [ 311.045518][ T9115] dump_stack+0x172/0x1f0 [ 311.049859][ T9115] dump_header+0x177/0x1152 [ 311.054368][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.060172][ T9115] ? ___ratelimit+0x2c8/0x595 [ 311.064843][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.071165][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 311.077684][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 311.082720][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 311.088357][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 311.094157][ T9115] ? ___ratelimit+0x60/0x595 [ 311.098733][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 311.103841][ T9115] oom_kill_process.cold+0x10/0x15 [ 311.108943][ T9115] out_of_memory+0x334/0x1340 [ 311.113604][ T9115] ? lock_downgrade+0x920/0x920 [ 311.118452][ T9115] ? oom_killer_disable+0x280/0x280 [ 311.123642][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 311.129183][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 311.134110][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 311.139348][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 311.144198][ T9115] try_charge+0xf4b/0x1440 [ 311.148608][ T9115] ? find_held_lock+0x35/0x130 [ 311.153391][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 311.158942][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 311.164882][ T9115] ? find_held_lock+0x35/0x130 [ 311.169637][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 311.175185][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 311.180738][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 311.185935][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 311.191467][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 311.196609][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 311.202327][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 311.208124][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 311.213842][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 311.219029][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 311.224308][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 311.229310][ T9115] ? __kasan_check_read+0x11/0x20 [ 311.234320][ T9115] copy_process+0x3f8/0x6880 [ 311.238910][ T9115] ? __kasan_check_read+0x11/0x20 [ 311.243924][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 311.249028][ T9115] ? __kasan_check_read+0x11/0x20 [ 311.254032][ T9115] ? mark_lock+0xc2/0x1220 [ 311.258453][ T9115] ? __cleanup_sighand+0x60/0x60 [ 311.263373][ T9115] ? find_held_lock+0x35/0x130 [ 311.268130][ T9115] _do_fork+0x146/0xf90 [ 311.272289][ T9115] ? copy_init_mm+0x20/0x20 [ 311.276786][ T9115] ? __kasan_check_read+0x11/0x20 [ 311.281977][ T9115] ? _copy_to_user+0x118/0x160 [ 311.286815][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.293038][ T9115] ? put_timespec64+0xda/0x140 [ 311.297788][ T9115] __x64_sys_clone+0x18d/0x250 [ 311.302541][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 311.307384][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 311.312737][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 311.317748][ T9115] do_syscall_64+0xfa/0x760 [ 311.322252][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.328131][ T9115] RIP: 0033:0x45851a [ 311.332032][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 311.351724][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.360129][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 311.368187][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 311.376151][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 311.384105][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 311.392060][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 311.410686][ T9115] memory: usage 18204kB, limit 0kB, failcnt 24 [ 311.423960][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 311.438374][ T9115] Memory cgroup stats for /syz4: [ 311.438489][ T9115] anon 13393920 [ 311.438489][ T9115] file 69632 [ 311.438489][ T9115] kernel_stack 262144 [ 311.438489][ T9115] slab 4161536 [ 311.438489][ T9115] sock 0 [ 311.438489][ T9115] shmem 0 [ 311.438489][ T9115] file_mapped 0 [ 311.438489][ T9115] file_dirty 135168 [ 311.438489][ T9115] file_writeback 0 [ 311.438489][ T9115] anon_thp 12582912 [ 311.438489][ T9115] inactive_anon 0 [ 311.438489][ T9115] active_anon 13393920 [ 311.438489][ T9115] inactive_file 0 [ 311.438489][ T9115] active_file 0 [ 311.438489][ T9115] unevictable 0 [ 311.438489][ T9115] slab_reclaimable 1486848 [ 311.438489][ T9115] slab_unreclaimable 2674688 [ 311.438489][ T9115] pgfault 14619 [ 311.438489][ T9115] pgmajfault 0 [ 311.438489][ T9115] workingset_refault 0 [ 311.438489][ T9115] workingset_activate 0 [ 311.438489][ T9115] workingset_nodereclaim 0 [ 311.438489][ T9115] pgrefill 33 [ 311.438489][ T9115] pgscan 0 [ 311.438489][ T9115] pgsteal 0 [ 311.438489][ T9115] pgactivate 0 [ 311.539804][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10977,uid=0 [ 311.556302][ T9115] Memory cgroup out of memory: Killed process 10977 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 311.602806][ T9120] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 311.630791][ T9120] CPU: 1 PID: 9120 Comm: syz-executor.5 Not tainted 5.4.0-rc5-next-20191029 #0 [ 311.639769][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.649833][ T9120] Call Trace: [ 311.653140][ T9120] dump_stack+0x172/0x1f0 [ 311.657482][ T9120] dump_header+0x177/0x1152 [ 311.661993][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.667817][ T9120] ? ___ratelimit+0x2c8/0x595 [ 311.672494][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.678391][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 311.683687][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 311.688722][ T9120] ? pagefault_out_of_memory+0x11c/0x11c [ 311.694364][ T9120] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 311.700179][ T9120] ? ___ratelimit+0x60/0x595 [ 311.704771][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 311.709896][ T9120] oom_kill_process.cold+0x10/0x15 [ 311.715012][ T9120] out_of_memory+0x334/0x1340 [ 311.719692][ T9120] ? lock_downgrade+0x920/0x920 [ 311.724554][ T9120] ? oom_killer_disable+0x280/0x280 [ 311.729767][ T9120] mem_cgroup_out_of_memory+0x1d8/0x240 [ 311.735320][ T9120] ? memcg_stat_show+0xc30/0xc30 [ 311.740268][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 311.745386][ T9120] ? _raw_spin_unlock+0x28/0x40 [ 311.750243][ T9120] try_charge+0xf4b/0x1440 [ 311.754665][ T9120] ? find_held_lock+0x35/0x130 [ 311.759443][ T9120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 311.764996][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 311.770551][ T9120] ? find_held_lock+0x35/0x130 [ 311.775322][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 311.780889][ T9120] __memcg_kmem_charge_memcg+0x7c/0x130 [ 311.786619][ T9120] ? memcg_kmem_put_cache+0x50/0x50 [ 311.791828][ T9120] ? get_mem_cgroup_from_mm+0x151/0x310 [ 311.797376][ T9120] __memcg_kmem_charge+0x13a/0x3a0 [ 311.802494][ T9120] __alloc_pages_nodemask+0x4f5/0x910 [ 311.807868][ T9120] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 311.813427][ T9120] ? __alloc_pages_slowpath+0x2920/0x2920 [ 311.819160][ T9120] ? percpu_ref_put_many+0xb1/0x180 [ 311.824468][ T9120] copy_process+0x3f8/0x6880 [ 311.829068][ T9120] ? __kasan_check_read+0x11/0x20 [ 311.834096][ T9120] ? __lock_acquire+0x16f2/0x4a00 [ 311.839127][ T9120] ? __kasan_check_read+0x11/0x20 [ 311.844769][ T9120] ? mark_lock+0xc2/0x1220 [ 311.849223][ T9120] ? __cleanup_sighand+0x60/0x60 [ 311.854164][ T9120] ? find_held_lock+0x35/0x130 [ 311.858959][ T9120] _do_fork+0x146/0xf90 [ 311.864167][ T9120] ? copy_init_mm+0x20/0x20 [ 311.868676][ T9120] ? __kasan_check_read+0x11/0x20 [ 311.873704][ T9120] ? _copy_to_user+0x118/0x160 [ 311.878479][ T9120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.884736][ T9120] ? put_timespec64+0xda/0x140 [ 311.889514][ T9120] __x64_sys_clone+0x18d/0x250 [ 311.894289][ T9120] ? __ia32_sys_vfork+0xc0/0xc0 [ 311.899153][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 311.904444][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 311.909484][ T9120] do_syscall_64+0xfa/0x760 [ 311.913996][ T9120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.919888][ T9120] RIP: 0033:0x45851a [ 311.923787][ T9120] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 311.943420][ T9120] RSP: 002b:00007ffc25433ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.951835][ T9120] RAX: ffffffffffffffda RBX: 00007ffc25433ab0 RCX: 000000000045851a [ 311.959816][ T9120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 311.967793][ T9120] RBP: 00007ffc25433af0 R08: 0000000000000001 R09: 0000000001ace940 [ 311.975765][ T9120] R10: 0000000001acec10 R11: 0000000000000246 R12: 0000000000000001 [ 311.983736][ T9120] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc25433b40 [ 312.693171][ T9120] memory: usage 11356kB, limit 0kB, failcnt 16 [ 312.706939][ T9120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 312.731280][ T9120] Memory cgroup stats for /syz5: [ 312.731397][ T9120] anon 7069696 [ 312.731397][ T9120] file 32768 [ 312.731397][ T9120] kernel_stack 262144 [ 312.731397][ T9120] slab 3551232 [ 312.731397][ T9120] sock 0 [ 312.731397][ T9120] shmem 0 [ 312.731397][ T9120] file_mapped 0 [ 312.731397][ T9120] file_dirty 135168 [ 312.731397][ T9120] file_writeback 0 [ 312.731397][ T9120] anon_thp 2097152 [ 312.731397][ T9120] inactive_anon 6578176 [ 312.731397][ T9120] active_anon 765952 [ 312.731397][ T9120] inactive_file 0 [ 312.731397][ T9120] active_file 0 [ 312.731397][ T9120] unevictable 122880 [ 312.731397][ T9120] slab_reclaimable 1216512 [ 312.731397][ T9120] slab_unreclaimable 2334720 [ 312.731397][ T9120] pgfault 30030 [ 312.731397][ T9120] pgmajfault 0 [ 312.731397][ T9120] workingset_refault 0 [ 312.731397][ T9120] workingset_activate 0 [ 312.731397][ T9120] workingset_nodereclaim 0 [ 312.731397][ T9120] pgrefill 0 [ 312.731397][ T9120] pgscan 0 [ 312.731397][ T9120] pgsteal 0 [ 312.731397][ T9120] pgactivate 0 [ 313.013512][ T9120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12556,uid=0 [ 313.057570][ T9120] Memory cgroup out of memory: Killed process 12556 (syz-executor.5) total-vm:60568kB, anon-rss:6204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 313.187303][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 313.223164][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 313.232134][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.242362][ T9112] Call Trace: [ 313.245677][ T9112] dump_stack+0x172/0x1f0 [ 313.250037][ T9112] dump_header+0x177/0x1152 [ 313.254554][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.260385][ T9112] ? ___ratelimit+0x2c8/0x595 [ 313.265077][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.270892][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 313.276188][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 313.281231][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 313.286869][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 313.292680][ T9112] ? ___ratelimit+0x60/0x595 [ 313.297276][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 313.302398][ T9112] oom_kill_process.cold+0x10/0x15 [ 313.307515][ T9112] out_of_memory+0x334/0x1340 [ 313.312203][ T9112] ? oom_killer_disable+0x280/0x280 [ 313.317423][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 313.322986][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 313.327928][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 313.333658][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 313.338533][ T9112] try_charge+0xf4b/0x1440 [ 313.343059][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 313.348613][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 313.354169][ T9112] ? cache_grow_begin+0x122/0xd00 [ 313.359205][ T9112] ? find_held_lock+0x35/0x130 [ 313.363975][ T9112] ? cache_grow_begin+0x122/0xd00 [ 313.369014][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 313.374673][ T9112] ? lock_downgrade+0x920/0x920 [ 313.379548][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 313.384757][ T9112] ? __kasan_check_read+0x11/0x20 [ 313.389796][ T9112] cache_grow_begin+0x61a/0xd00 [ 313.394655][ T9112] ? write_comp_data+0x61/0x70 [ 313.399427][ T9112] ? mempolicy_slab_node+0x139/0x390 [ 313.404717][ T9112] fallback_alloc+0x1f8/0x2d0 [ 313.409406][ T9112] ____cache_alloc_node+0x1bc/0x1d0 [ 313.414606][ T9112] ? trace_hardirqs_off+0x62/0x240 [ 313.419720][ T9112] kmem_cache_alloc+0x1ef/0x710 [ 313.424575][ T9112] ? lock_downgrade+0x920/0x920 [ 313.429435][ T9112] ? rwlock_bug.part.0+0x90/0x90 [ 313.434558][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 313.439767][ T9112] ext4_alloc_inode+0x1f/0x640 [ 313.444544][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 313.449779][ T9112] alloc_inode+0x68/0x1e0 [ 313.454129][ T9112] iget_locked+0x1a6/0x4b0 [ 313.458554][ T9112] __ext4_iget+0x265/0x3e20 [ 313.463085][ T9112] ? ext4_get_projid+0x190/0x190 [ 313.468055][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 313.473614][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 313.479610][ T9112] ? d_alloc_parallel+0xa6e/0x1c00 [ 313.484749][ T9112] ext4_lookup+0x3b1/0x7a0 [ 313.489208][ T9112] ? ext4_cross_rename+0x1430/0x1430 [ 313.494518][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 313.499567][ T9112] ? __kasan_check_read+0x11/0x20 [ 313.504610][ T9112] ? lockdep_init_map+0x1be/0x6d0 [ 313.509650][ T9112] __lookup_slow+0x279/0x500 [ 313.514257][ T9112] ? vfs_unlink+0x620/0x620 [ 313.518800][ T9112] lookup_slow+0x58/0x80 [ 313.523054][ T9112] path_mountpoint+0x5d2/0x1e50 [ 313.527964][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 313.533518][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 313.539520][ T9112] ? path_openat+0x4710/0x4710 [ 313.544311][ T9112] filename_mountpoint+0x18e/0x390 [ 313.549437][ T9112] ? filename_parentat.isra.0+0x410/0x410 [ 313.555157][ T9112] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 313.561337][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.567588][ T9112] ? __phys_addr_symbol+0x30/0x70 [ 313.572611][ T9112] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 313.578322][ T9112] ? __check_object_size+0x3d/0x437 [ 313.583693][ T9112] ? strncpy_from_user+0x2b4/0x400 [ 313.588809][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.595035][ T9112] ? getname_flags+0x277/0x5b0 [ 313.599796][ T9112] user_path_mountpoint_at+0x3a/0x50 [ 313.605085][ T9112] ksys_umount+0x164/0xef0 [ 313.609493][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.615714][ T9112] ? __detach_mounts+0x290/0x290 [ 313.620628][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 313.626162][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 313.631635][ T9112] ? do_syscall_64+0x26/0x760 [ 313.636311][ T9112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.642394][ T9112] ? do_syscall_64+0x26/0x760 [ 313.647074][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 313.652354][ T9112] __x64_sys_umount+0x54/0x80 [ 313.657030][ T9112] do_syscall_64+0xfa/0x760 [ 313.661537][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.667420][ T9112] RIP: 0033:0x45c977 [ 313.671299][ T9112] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.690890][ T9112] RSP: 002b:00007ffe1a491008 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 313.699288][ T9112] RAX: ffffffffffffffda RBX: 000000000004b884 RCX: 000000000045c977 [ 313.707253][ T9112] RDX: 0000000000403a70 RSI: 0000000000000002 RDI: 00007ffe1a4910b0 [ 313.715204][ T9112] RBP: 00000000000001cf R08: 0000000000000000 R09: 0000000000000010 [ 313.723326][ T9112] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe1a492140 [ 313.731295][ T9112] R13: 00000000019f8940 R14: 0000000000000000 R15: 00007ffe1a492140 [ 313.743131][ T9112] memory: usage 56692kB, limit 0kB, failcnt 22 [ 313.749327][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 313.756435][ T9112] Memory cgroup stats for /syz3: [ 313.756628][ T9112] anon 50434048 [ 313.756628][ T9112] file 36864 [ 313.756628][ T9112] kernel_stack 655360 [ 313.756628][ T9112] slab 4894720 [ 313.756628][ T9112] sock 0 [ 313.756628][ T9112] shmem 0 [ 313.756628][ T9112] file_mapped 0 [ 313.756628][ T9112] file_dirty 0 [ 313.756628][ T9112] file_writeback 0 [ 313.756628][ T9112] anon_thp 25165824 [ 313.756628][ T9112] inactive_anon 25796608 [ 313.756628][ T9112] active_anon 24608768 [ 313.756628][ T9112] inactive_file 32768 [ 313.756628][ T9112] active_file 24576 [ 313.756628][ T9112] unevictable 45056 [ 313.756628][ T9112] slab_reclaimable 1216512 [ 313.756628][ T9112] slab_unreclaimable 3678208 [ 313.756628][ T9112] pgfault 19437 [ 313.756628][ T9112] pgmajfault 0 [ 313.756628][ T9112] workingset_refault 0 [ 313.756628][ T9112] workingset_activate 0 [ 313.756628][ T9112] workingset_nodereclaim 0 [ 313.756628][ T9112] pgrefill 235 [ 313.756628][ T9112] pgscan 767 [ 313.756628][ T9112] pgsteal 565 [ 313.851219][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12425,uid=0 [ 313.867497][ T9112] Memory cgroup out of memory: Killed process 12425 (syz-executor.3) total-vm:60700kB, anon-rss:6336kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 313.892358][ T1080] oom_reaper: reaped process 12425 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 313.903590][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 313.918038][ T9115] CPU: 1 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 313.927001][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.937058][ T9115] Call Trace: [ 313.940362][ T9115] dump_stack+0x172/0x1f0 [ 313.944700][ T9115] dump_header+0x177/0x1152 [ 313.949208][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.955892][ T9115] ? ___ratelimit+0x2c8/0x595 [ 313.960592][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.966404][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 313.971693][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 313.976721][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 313.982353][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 313.988158][ T9115] ? ___ratelimit+0x60/0x595 [ 313.992759][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 313.997883][ T9115] oom_kill_process.cold+0x10/0x15 [ 314.003010][ T9115] out_of_memory+0x334/0x1340 [ 314.007690][ T9115] ? lock_downgrade+0x920/0x920 [ 314.012766][ T9115] ? oom_killer_disable+0x280/0x280 [ 314.017980][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 314.023533][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 314.028477][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 314.033593][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 314.038450][ T9115] try_charge+0xf4b/0x1440 [ 314.042871][ T9115] ? find_held_lock+0x35/0x130 [ 314.047650][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 314.053193][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 314.058848][ T9115] ? find_held_lock+0x35/0x130 [ 314.063824][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 314.070446][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 314.075996][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 314.081213][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 314.086940][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 314.092050][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 314.097681][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 314.103576][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 314.109393][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 314.114597][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 314.119867][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 314.124894][ T9115] ? __kasan_check_read+0x11/0x20 [ 314.129932][ T9115] copy_process+0x3f8/0x6880 [ 314.134507][ T9115] ? __kasan_check_read+0x11/0x20 [ 314.139527][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 314.144553][ T9115] ? __kasan_check_read+0x11/0x20 [ 314.149580][ T9115] ? mark_lock+0xc2/0x1220 [ 314.153992][ T9115] ? __cleanup_sighand+0x60/0x60 [ 314.158940][ T9115] ? find_held_lock+0x35/0x130 [ 314.163713][ T9115] _do_fork+0x146/0xf90 [ 314.167865][ T9115] ? copy_init_mm+0x20/0x20 [ 314.172358][ T9115] ? __kasan_check_read+0x11/0x20 [ 314.177378][ T9115] ? _copy_to_user+0x118/0x160 [ 314.182140][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.188495][ T9115] ? put_timespec64+0xda/0x140 [ 314.193246][ T9115] __x64_sys_clone+0x18d/0x250 [ 314.197989][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 314.202840][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 314.208118][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 314.213150][ T9115] do_syscall_64+0xfa/0x760 [ 314.217640][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.223607][ T9115] RIP: 0033:0x45851a [ 314.227496][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 314.247097][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.255586][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 314.263560][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 314.271634][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 314.279602][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 314.287579][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 314.296499][ T9115] memory: usage 15436kB, limit 0kB, failcnt 30 [ 314.303743][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.310594][ T9115] Memory cgroup stats for [ 314.310604][ T9115] /syz4: [ 314.310701][ T9115] anon 11169792 [ 314.310701][ T9115] file 69632 [ 314.310701][ T9115] kernel_stack 196608 [ 314.310701][ T9115] slab 3887104 [ 314.310701][ T9115] sock 0 [ 314.310701][ T9115] shmem 0 [ 314.310701][ T9115] file_mapped 0 [ 314.310701][ T9115] file_dirty 135168 [ 314.310701][ T9115] file_writeback 0 [ 314.310701][ T9115] anon_thp 10485760 [ 314.310701][ T9115] inactive_anon 0 [ 314.310701][ T9115] active_anon 11169792 [ 314.310701][ T9115] inactive_file 0 [ 314.310701][ T9115] active_file 0 [ 314.310701][ T9115] unevictable 0 [ 314.310701][ T9115] slab_reclaimable 1486848 [ 314.310701][ T9115] slab_unreclaimable 2400256 [ 314.310701][ T9115] pgfault 14619 [ 314.310701][ T9115] pgmajfault 0 [ 314.310701][ T9115] workingset_refault 0 [ 314.310701][ T9115] workingset_activate 0 [ 314.310701][ T9115] workingset_nodereclaim 0 [ 314.310701][ T9115] pgrefill 33 [ 314.310701][ T9115] pgscan 0 [ 314.310701][ T9115] pgsteal 0 [ 314.310701][ T9115] pgactivate 0 [ 314.409900][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10939,uid=0 [ 314.426993][ T9115] Memory cgroup out of memory: Killed process 10939 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 314.458816][ T9120] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 314.471571][ T9120] CPU: 0 PID: 9120 Comm: syz-executor.5 Not tainted 5.4.0-rc5-next-20191029 #0 [ 314.480558][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.490598][ T9120] Call Trace: [ 314.494116][ T9120] dump_stack+0x172/0x1f0 [ 314.498449][ T9120] dump_header+0x177/0x1152 [ 314.502961][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 314.508759][ T9120] ? ___ratelimit+0x2c8/0x595 [ 314.513425][ T9120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 314.519211][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 314.524481][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 314.529487][ T9120] ? pagefault_out_of_memory+0x11c/0x11c [ 314.535100][ T9120] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 314.540886][ T9120] ? ___ratelimit+0x60/0x595 [ 314.545454][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 314.550543][ T9120] oom_kill_process.cold+0x10/0x15 [ 314.555634][ T9120] out_of_memory+0x334/0x1340 [ 314.560289][ T9120] ? lock_downgrade+0x920/0x920 [ 314.565139][ T9120] ? oom_killer_disable+0x280/0x280 [ 314.570340][ T9120] mem_cgroup_out_of_memory+0x1d8/0x240 [ 314.575878][ T9120] ? memcg_stat_show+0xc30/0xc30 [ 314.580820][ T9120] ? do_raw_spin_unlock+0x57/0x270 [ 314.585923][ T9120] ? _raw_spin_unlock+0x28/0x40 [ 314.590756][ T9120] try_charge+0xf4b/0x1440 [ 314.595170][ T9120] ? find_held_lock+0x35/0x130 [ 314.599919][ T9120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 314.605641][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 314.611191][ T9120] ? find_held_lock+0x35/0x130 [ 314.615962][ T9120] ? get_mem_cgroup_from_mm+0x139/0x310 [ 314.621510][ T9120] __memcg_kmem_charge_memcg+0x7c/0x130 [ 314.627196][ T9120] ? memcg_kmem_put_cache+0x50/0x50 [ 314.632424][ T9120] ? get_mem_cgroup_from_mm+0x151/0x310 [ 314.637960][ T9120] __memcg_kmem_charge+0x13a/0x3a0 [ 314.643407][ T9120] __alloc_pages_nodemask+0x4f5/0x910 [ 314.648761][ T9120] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 314.654317][ T9120] ? __alloc_pages_slowpath+0x2920/0x2920 [ 314.660483][ T9120] ? percpu_ref_put_many+0xb1/0x180 [ 314.665686][ T9120] copy_process+0x3f8/0x6880 [ 314.670268][ T9120] ? __kasan_check_read+0x11/0x20 [ 314.675300][ T9120] ? __lock_acquire+0x16f2/0x4a00 [ 314.680315][ T9120] ? __kasan_check_read+0x11/0x20 [ 314.685348][ T9120] ? mark_lock+0xc2/0x1220 [ 314.689798][ T9120] ? __cleanup_sighand+0x60/0x60 [ 314.694723][ T9120] ? find_held_lock+0x35/0x130 [ 314.699480][ T9120] _do_fork+0x146/0xf90 [ 314.703629][ T9120] ? copy_init_mm+0x20/0x20 [ 314.708126][ T9120] ? __kasan_check_read+0x11/0x20 [ 314.713131][ T9120] ? _copy_to_user+0x118/0x160 [ 314.718022][ T9120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.724501][ T9120] ? put_timespec64+0xda/0x140 [ 314.729247][ T9120] __x64_sys_clone+0x18d/0x250 [ 314.733989][ T9120] ? __ia32_sys_vfork+0xc0/0xc0 [ 314.738908][ T9120] ? lockdep_hardirqs_on+0x421/0x5e0 [ 314.744184][ T9120] ? trace_hardirqs_on+0x67/0x240 [ 314.749216][ T9120] do_syscall_64+0xfa/0x760 [ 314.753731][ T9120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.759613][ T9120] RIP: 0033:0x45851a [ 314.763494][ T9120] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 314.784122][ T9120] RSP: 002b:00007ffc25433ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.793036][ T9120] RAX: ffffffffffffffda RBX: 00007ffc25433ab0 RCX: 000000000045851a [ 314.800988][ T9120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 314.808977][ T9120] RBP: 00007ffc25433af0 R08: 0000000000000001 R09: 0000000001ace940 [ 314.816929][ T9120] R10: 0000000001acec10 R11: 0000000000000246 R12: 0000000000000001 [ 314.824898][ T9120] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc25433b40 [ 314.843004][ T9120] memory: usage 4900kB, limit 0kB, failcnt 23 [ 314.849113][ T9120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.856065][ T9120] Memory cgroup stats for /syz5: [ 314.856158][ T9120] anon 851968 [ 314.856158][ T9120] file 32768 [ 314.856158][ T9120] kernel_stack 196608 [ 314.856158][ T9120] slab 3551232 [ 314.856158][ T9120] sock 0 [ 314.856158][ T9120] shmem 0 [ 314.856158][ T9120] file_mapped 0 [ 314.856158][ T9120] file_dirty 135168 [ 314.856158][ T9120] file_writeback 0 [ 314.856158][ T9120] anon_thp 0 [ 314.856158][ T9120] inactive_anon 233472 [ 314.856158][ T9120] active_anon 765952 [ 314.856158][ T9120] inactive_file 0 [ 314.856158][ T9120] active_file 0 [ 314.856158][ T9120] unevictable 122880 [ 314.856158][ T9120] slab_reclaimable 1216512 [ 314.856158][ T9120] slab_unreclaimable 2334720 [ 314.856158][ T9120] pgfault 30030 [ 314.856158][ T9120] pgmajfault 0 [ 314.856158][ T9120] workingset_refault 0 [ 314.856158][ T9120] workingset_activate 0 [ 314.856158][ T9120] workingset_nodereclaim 0 [ 314.856158][ T9120] pgrefill 0 [ 314.856158][ T9120] pgscan 0 [ 314.856158][ T9120] pgsteal 0 [ 314.856158][ T9120] pgactivate 0 [ 314.953997][ T9120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9120,uid=0 [ 314.969480][ T9120] Memory cgroup out of memory: Killed process 9120 (syz-executor.5) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 314.987791][ T1080] oom_reaper: reaped process 9120 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 314.987967][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 315.021209][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 315.030181][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.040241][ T9112] Call Trace: [ 315.043572][ T9112] dump_stack+0x172/0x1f0 [ 315.047917][ T9112] dump_header+0x177/0x1152 [ 315.052433][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.058250][ T9112] ? ___ratelimit+0x2c8/0x595 [ 315.063281][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.069090][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 315.074590][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 315.079663][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 315.085309][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 315.091124][ T9112] ? ___ratelimit+0x60/0x595 [ 315.095717][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 315.100841][ T9112] oom_kill_process.cold+0x10/0x15 [ 315.105999][ T9112] out_of_memory+0x334/0x1340 [ 315.110698][ T9112] ? oom_killer_disable+0x280/0x280 [ 315.115906][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 315.121551][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 315.126744][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 315.131841][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 315.136691][ T9112] try_charge+0xf4b/0x1440 [ 315.141104][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 315.146640][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 315.152179][ T9112] ? cache_grow_begin+0x122/0xd00 [ 315.157187][ T9112] ? find_held_lock+0x35/0x130 [ 315.161930][ T9112] ? cache_grow_begin+0x122/0xd00 [ 315.166938][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 315.172506][ T9112] ? lock_downgrade+0x920/0x920 [ 315.177365][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 315.182546][ T9112] ? __kasan_check_read+0x11/0x20 [ 315.187559][ T9112] cache_grow_begin+0x61a/0xd00 [ 315.192402][ T9112] ? write_comp_data+0x61/0x70 [ 315.197170][ T9112] ? mempolicy_slab_node+0x139/0x390 [ 315.202454][ T9112] fallback_alloc+0x1f8/0x2d0 [ 315.207123][ T9112] ____cache_alloc_node+0x1bc/0x1d0 [ 315.212347][ T9112] ? trace_hardirqs_off+0x62/0x240 [ 315.217450][ T9112] kmem_cache_alloc+0x1ef/0x710 [ 315.222296][ T9112] ? lock_downgrade+0x920/0x920 [ 315.227127][ T9112] ? rwlock_bug.part.0+0x90/0x90 [ 315.232046][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 315.237236][ T9112] ext4_alloc_inode+0x1f/0x640 [ 315.241984][ T9112] ? ratelimit_state_init+0xb0/0xb0 [ 315.247259][ T9112] alloc_inode+0x68/0x1e0 [ 315.251569][ T9112] iget_locked+0x1a6/0x4b0 [ 315.255965][ T9112] __ext4_iget+0x265/0x3e20 [ 315.260467][ T9112] ? ext4_get_projid+0x190/0x190 [ 315.265383][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 315.271101][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 315.277434][ T9112] ? d_alloc_parallel+0xa6e/0x1c00 [ 315.282530][ T9112] ext4_lookup+0x3b1/0x7a0 [ 315.286927][ T9112] ? ext4_cross_rename+0x1430/0x1430 [ 315.292193][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 315.297227][ T9112] ? __kasan_check_read+0x11/0x20 [ 315.302498][ T9112] ? lockdep_init_map+0x1be/0x6d0 [ 315.307513][ T9112] __lookup_slow+0x279/0x500 [ 315.312096][ T9112] ? vfs_unlink+0x620/0x620 [ 315.316602][ T9112] lookup_slow+0x58/0x80 [ 315.320835][ T9112] path_mountpoint+0x5d2/0x1e50 [ 315.325669][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 315.331192][ T9112] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 315.337153][ T9112] ? path_openat+0x4710/0x4710 [ 315.341968][ T9112] filename_mountpoint+0x18e/0x390 [ 315.347059][ T9112] ? filename_parentat.isra.0+0x410/0x410 [ 315.352759][ T9112] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 315.359261][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.366558][ T9112] ? __phys_addr_symbol+0x30/0x70 [ 315.371590][ T9112] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 315.377300][ T9112] ? __check_object_size+0x3d/0x437 [ 315.382484][ T9112] ? strncpy_from_user+0x2b4/0x400 [ 315.387611][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.395337][ T9112] ? getname_flags+0x277/0x5b0 [ 315.400239][ T9112] user_path_mountpoint_at+0x3a/0x50 [ 315.405543][ T9112] ksys_umount+0x164/0xef0 [ 315.409970][ T9112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.416379][ T9112] ? __detach_mounts+0x290/0x290 [ 315.421310][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.426753][ T9112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 315.432225][ T9112] ? do_syscall_64+0x26/0x760 [ 315.436907][ T9112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.443296][ T9112] ? do_syscall_64+0x26/0x760 [ 315.447954][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 315.453754][ T9112] __x64_sys_umount+0x54/0x80 [ 315.458410][ T9112] do_syscall_64+0xfa/0x760 [ 315.462894][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.468772][ T9112] RIP: 0033:0x45c977 [ 315.472646][ T9112] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.492253][ T9112] RSP: 002b:00007ffe1a491008 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 315.500664][ T9112] RAX: ffffffffffffffda RBX: 000000000004b884 RCX: 000000000045c977 [ 315.508628][ T9112] RDX: 0000000000403a70 RSI: 0000000000000002 RDI: 00007ffe1a4910b0 [ 315.516590][ T9112] RBP: 00000000000001cf R08: 0000000000000000 R09: 0000000000000010 [ 315.524560][ T9112] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe1a492140 [ 315.533649][ T9112] R13: 00000000019f8940 R14: 0000000000000000 R15: 00007ffe1a492140 [ 315.542687][ T9112] memory: usage 50168kB, limit 0kB, failcnt 28 [ 315.549308][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 315.556254][ T9112] Memory cgroup stats for /syz3: [ 315.556358][ T9112] anon 43925504 [ 315.556358][ T9112] file 36864 [ 315.556358][ T9112] kernel_stack 589824 [ 315.556358][ T9112] slab 4894720 [ 315.556358][ T9112] sock 0 [ 315.556358][ T9112] shmem 0 [ 315.556358][ T9112] file_mapped 0 [ 315.556358][ T9112] file_dirty 0 [ 315.556358][ T9112] file_writeback 0 [ 315.556358][ T9112] anon_thp 23068672 [ 315.556358][ T9112] inactive_anon 19333120 [ 315.556358][ T9112] active_anon 24608768 [ 315.556358][ T9112] inactive_file 32768 [ 315.556358][ T9112] active_file 24576 [ 315.556358][ T9112] unevictable 45056 [ 315.556358][ T9112] slab_reclaimable 1216512 [ 315.556358][ T9112] slab_unreclaimable 3678208 [ 315.556358][ T9112] pgfault 19437 [ 315.556358][ T9112] pgmajfault 0 [ 315.556358][ T9112] workingset_refault 0 [ 315.556358][ T9112] workingset_activate 0 [ 315.556358][ T9112] workingset_nodereclaim 0 [ 315.556358][ T9112] pgrefill 235 [ 315.556358][ T9112] pgscan 767 [ 315.556358][ T9112] pgsteal 565 [ 315.650675][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12480,uid=0 [ 315.667202][ T9112] Memory cgroup out of memory: Killed process 12480 (syz-executor.3) total-vm:60568kB, anon-rss:6208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 315.686065][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 315.704105][ T9115] CPU: 0 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 315.711283][ T1080] oom_reaper: reaped process 12480 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 315.713065][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.734189][ T9115] Call Trace: [ 315.737501][ T9115] dump_stack+0x172/0x1f0 [ 315.741833][ T9115] dump_header+0x177/0x1152 [ 315.746339][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.752150][ T9115] ? ___ratelimit+0x2c8/0x595 [ 315.756821][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.762630][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 315.767914][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 315.772937][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 315.778566][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 315.784379][ T9115] ? ___ratelimit+0x60/0x595 [ 315.788967][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 315.794081][ T9115] oom_kill_process.cold+0x10/0x15 [ 315.799193][ T9115] out_of_memory+0x334/0x1340 [ 315.803869][ T9115] ? lock_downgrade+0x920/0x920 [ 315.808727][ T9115] ? oom_killer_disable+0x280/0x280 [ 315.813942][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 315.819488][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 315.824424][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 315.829535][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 315.834387][ T9115] try_charge+0xf4b/0x1440 [ 315.838806][ T9115] ? find_held_lock+0x35/0x130 [ 315.843571][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 315.849113][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 315.854659][ T9115] ? find_held_lock+0x35/0x130 [ 315.859435][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 315.864990][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 315.870533][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 315.875820][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 315.881365][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 315.886475][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 315.891847][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 315.897389][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 315.903121][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 315.908321][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 315.913599][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 315.918618][ T9115] ? __kasan_check_read+0x11/0x20 [ 315.923649][ T9115] copy_process+0x3f8/0x6880 [ 315.928239][ T9115] ? __kasan_check_read+0x11/0x20 [ 315.933256][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 315.938707][ T9115] ? __kasan_check_read+0x11/0x20 [ 315.943728][ T9115] ? mark_lock+0xc2/0x1220 [ 315.948149][ T9115] ? __cleanup_sighand+0x60/0x60 [ 315.953085][ T9115] ? find_held_lock+0x35/0x130 [ 315.957849][ T9115] _do_fork+0x146/0xf90 [ 315.962002][ T9115] ? copy_init_mm+0x20/0x20 [ 315.966499][ T9115] ? __kasan_check_read+0x11/0x20 [ 315.971774][ T9115] ? _copy_to_user+0x118/0x160 [ 315.976519][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.982738][ T9115] ? put_timespec64+0xda/0x140 [ 315.987484][ T9115] __x64_sys_clone+0x18d/0x250 [ 315.994746][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 315.999589][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.004852][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 316.009923][ T9115] do_syscall_64+0xfa/0x760 [ 316.014410][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.020282][ T9115] RIP: 0033:0x45851a [ 316.024168][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 316.043748][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 316.052138][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 316.060090][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 316.068039][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 316.076002][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 316.083952][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 316.093876][ T9115] memory: usage 13028kB, limit 0kB, failcnt 36 [ 316.100087][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.107073][ T9115] Memory cgroup stats for /syz4: [ 316.107174][ T9115] anon 9023488 [ 316.107174][ T9115] file 69632 [ 316.107174][ T9115] kernel_stack 131072 [ 316.107174][ T9115] slab 3887104 [ 316.107174][ T9115] sock 0 [ 316.107174][ T9115] shmem 0 [ 316.107174][ T9115] file_mapped 0 [ 316.107174][ T9115] file_dirty 135168 [ 316.107174][ T9115] file_writeback 0 [ 316.107174][ T9115] anon_thp 8388608 [ 316.107174][ T9115] inactive_anon 0 [ 316.107174][ T9115] active_anon 9023488 [ 316.107174][ T9115] inactive_file 0 [ 316.107174][ T9115] active_file 0 [ 316.107174][ T9115] unevictable 0 [ 316.107174][ T9115] slab_reclaimable 1486848 [ 316.107174][ T9115] slab_unreclaimable 2400256 [ 316.107174][ T9115] pgfault 14619 [ 316.107174][ T9115] pgmajfault 0 [ 316.107174][ T9115] workingset_refault 0 [ 316.107174][ T9115] workingset_activate 0 [ 316.107174][ T9115] workingset_nodereclaim 0 [ 316.107174][ T9115] pgrefill 33 [ 316.107174][ T9115] pgscan 0 [ 316.107174][ T9115] pgsteal 0 [ 316.107174][ T9115] pgactivate 0 [ 316.112255][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10919,uid=0 [ 316.113216][ T9115] Memory cgroup out of memory: Killed process 10919 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 316.241746][ T1080] oom_reaper: reaped process 10919 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 316.242496][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 316.265300][ T9115] CPU: 0 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 316.274242][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.284331][ T9115] Call Trace: [ 316.287639][ T9115] dump_stack+0x172/0x1f0 [ 316.291981][ T9115] dump_header+0x177/0x1152 [ 316.291999][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.292018][ T9115] ? ___ratelimit+0x2c8/0x595 [ 316.302284][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.302300][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.302316][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 316.302331][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 316.302349][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 316.334628][ T9115] ? ___ratelimit+0x60/0x595 [ 316.339233][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 316.344336][ T9115] oom_kill_process.cold+0x10/0x15 [ 316.344351][ T9115] out_of_memory+0x334/0x1340 [ 316.344363][ T9115] ? lock_downgrade+0x920/0x920 [ 316.344384][ T9115] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 316.344397][ T9115] ? oom_killer_disable+0x280/0x280 [ 316.344419][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 316.354265][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 316.364881][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 316.364897][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 316.364913][ T9115] try_charge+0xf4b/0x1440 [ 316.364925][ T9115] ? find_held_lock+0x35/0x130 [ 316.364946][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 316.364965][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 316.412213][ T9115] ? find_held_lock+0x35/0x130 [ 316.417006][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 316.422541][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 316.428066][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 316.433287][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 316.438975][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 316.444124][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 316.449493][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 316.455025][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 316.460786][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 316.466005][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.471278][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 316.476306][ T9115] ? __kasan_check_read+0x11/0x20 [ 316.481323][ T9115] copy_process+0x3f8/0x6880 [ 316.485896][ T9115] ? __kasan_check_read+0x11/0x20 [ 316.490911][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 316.495923][ T9115] ? __kasan_check_read+0x11/0x20 [ 316.500967][ T9115] ? mark_lock+0xc2/0x1220 [ 316.505380][ T9115] ? __cleanup_sighand+0x60/0x60 [ 316.510298][ T9115] ? find_held_lock+0x35/0x130 [ 316.515051][ T9115] _do_fork+0x146/0xf90 [ 316.519286][ T9115] ? copy_init_mm+0x20/0x20 [ 316.523773][ T9115] ? __kasan_check_read+0x11/0x20 [ 316.528796][ T9115] ? _copy_to_user+0x118/0x160 [ 316.533554][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.539786][ T9115] ? put_timespec64+0xda/0x140 [ 316.544540][ T9115] __x64_sys_clone+0x18d/0x250 [ 316.549304][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 316.554142][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.559404][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 316.564408][ T9115] do_syscall_64+0xfa/0x760 [ 316.568901][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.574769][ T9115] RIP: 0033:0x45851a [ 316.578645][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 316.598228][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 316.606620][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 316.614570][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 316.622520][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 316.630480][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 316.638430][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 316.646999][ T9115] memory: usage 10692kB, limit 0kB, failcnt 42 [ 316.653309][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.653314][ T9115] Memory cgroup stats for /syz4: [ 316.653421][ T9115] anon 6791168 [ 316.653421][ T9115] file 69632 [ 316.653421][ T9115] kernel_stack 131072 [ 316.653421][ T9115] slab 3887104 [ 316.653421][ T9115] sock 0 [ 316.653421][ T9115] shmem 0 [ 316.653421][ T9115] file_mapped 0 [ 316.653421][ T9115] file_dirty 135168 [ 316.653421][ T9115] file_writeback 0 [ 316.653421][ T9115] anon_thp 6291456 [ 316.653421][ T9115] inactive_anon 0 [ 316.653421][ T9115] active_anon 6791168 [ 316.653421][ T9115] inactive_file 0 [ 316.653421][ T9115] active_file 0 [ 316.653421][ T9115] unevictable 0 [ 316.653421][ T9115] slab_reclaimable 1486848 [ 316.653421][ T9115] slab_unreclaimable 2400256 [ 316.653421][ T9115] pgfault 14619 [ 316.653421][ T9115] pgmajfault 0 [ 316.653421][ T9115] workingset_refault 0 [ 316.653421][ T9115] workingset_activate 0 [ 316.653421][ T9115] workingset_nodereclaim 0 [ 316.653421][ T9115] pgrefill 33 [ 316.653421][ T9115] pgscan 33 [ 316.653421][ T9115] pgsteal 0 [ 316.653421][ T9115] pgactivate 0 [ 316.653437][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10853,uid=0 [ 316.653535][ T9115] Memory cgroup out of memory: Killed process 10853 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 316.741253][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 316.772674][ T1080] oom_reaper: reaped process 10853 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 316.815157][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 316.824314][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.824319][ T9112] Call Trace: [ 316.824337][ T9112] dump_stack+0x172/0x1f0 [ 316.824356][ T9112] dump_header+0x177/0x1152 [ 316.824370][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.824382][ T9112] ? ___ratelimit+0x2c8/0x595 [ 316.824399][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.837714][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.846510][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 316.856967][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 316.868048][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 316.878657][ T9112] ? ___ratelimit+0x60/0x595 [ 316.889154][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 316.894272][ T9112] oom_kill_process.cold+0x10/0x15 [ 316.894288][ T9112] out_of_memory+0x334/0x1340 [ 316.894300][ T9112] ? lock_downgrade+0x920/0x920 [ 316.894318][ T9112] ? oom_killer_disable+0x280/0x280 [ 316.894341][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 316.894362][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 316.904131][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 316.914124][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 316.914144][ T9112] try_charge+0xf4b/0x1440 [ 316.914156][ T9112] ? find_held_lock+0x35/0x130 [ 316.914180][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 316.924645][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 316.934552][ T9112] ? find_held_lock+0x35/0x130 [ 316.934567][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 316.934590][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 316.934606][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 316.934628][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 316.943758][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 316.943776][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 316.943791][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 316.943810][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 316.954862][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 316.954882][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 316.954894][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 316.954910][ T9112] ? __kasan_check_read+0x11/0x20 [ 316.965193][ T9112] copy_process+0x3f8/0x6880 [ 316.965209][ T9112] ? __kasan_check_read+0x11/0x20 [ 316.965221][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 316.965236][ T9112] ? __kasan_check_read+0x11/0x20 [ 316.975956][ T9112] ? mark_lock+0xc2/0x1220 [ 316.986575][ T9112] ? __cleanup_sighand+0x60/0x60 [ 317.052917][ T9112] ? find_held_lock+0x35/0x130 [ 317.057672][ T9112] _do_fork+0x146/0xf90 [ 317.062242][ T9112] ? copy_init_mm+0x20/0x20 [ 317.066745][ T9112] ? __kasan_check_read+0x11/0x20 [ 317.071751][ T9112] ? _copy_to_user+0x118/0x160 [ 317.076496][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.082813][ T9112] ? put_timespec64+0xda/0x140 [ 317.087560][ T9112] __x64_sys_clone+0x18d/0x250 [ 317.092303][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 317.097223][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 317.102484][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 317.107585][ T9112] do_syscall_64+0xfa/0x760 [ 317.112070][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.117943][ T9112] RIP: 0033:0x45851a [ 317.121830][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 317.141408][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.149794][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 317.157749][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 317.165786][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 317.173759][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 317.181710][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 317.193124][ T9112] memory: usage 43344kB, limit 0kB, failcnt 103 [ 317.199403][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 317.208545][ T9112] Memory cgroup stats for /syz3: [ 317.208657][ T9112] anon 37568512 [ 317.208657][ T9112] file 36864 [ 317.208657][ T9112] kernel_stack 524288 [ 317.208657][ T9112] slab 4440064 [ 317.208657][ T9112] sock 0 [ 317.208657][ T9112] shmem 0 [ 317.208657][ T9112] file_mapped 0 [ 317.208657][ T9112] file_dirty 0 [ 317.208657][ T9112] file_writeback 0 [ 317.208657][ T9112] anon_thp 20971520 [ 317.208657][ T9112] inactive_anon 12996608 [ 317.208657][ T9112] active_anon 24608768 [ 317.208657][ T9112] inactive_file 32768 [ 317.208657][ T9112] active_file 24576 [ 317.208657][ T9112] unevictable 45056 [ 317.208657][ T9112] slab_reclaimable 1216512 [ 317.208657][ T9112] slab_unreclaimable 3223552 [ 317.208657][ T9112] pgfault 19437 [ 317.208657][ T9112] pgmajfault 0 [ 317.208657][ T9112] workingset_refault 0 [ 317.208657][ T9112] workingset_activate 0 [ 317.208657][ T9112] workingset_nodereclaim 0 [ 317.208657][ T9112] pgrefill 370 [ 317.208657][ T9112] pgscan 899 [ 317.208657][ T9112] pgsteal 565 [ 317.351180][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12537,uid=0 [ 317.377148][ T9112] Memory cgroup out of memory: Killed process 12537 (syz-executor.3) total-vm:60568kB, anon-rss:6204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 317.402827][ T1080] oom_reaper: reaped process 12537 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 317.404010][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 317.437234][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 317.446308][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.456347][ T9112] Call Trace: [ 317.459684][ T9112] dump_stack+0x172/0x1f0 [ 317.463998][ T9112] dump_header+0x177/0x1152 [ 317.468480][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 317.474263][ T9112] ? ___ratelimit+0x2c8/0x595 [ 317.479037][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 317.484836][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 317.490110][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 317.495125][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 317.500739][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 317.506527][ T9112] ? ___ratelimit+0x60/0x595 [ 317.511098][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 317.516195][ T9112] oom_kill_process.cold+0x10/0x15 [ 317.521383][ T9112] out_of_memory+0x334/0x1340 [ 317.526044][ T9112] ? lock_downgrade+0x920/0x920 [ 317.530873][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 317.536676][ T9112] ? oom_killer_disable+0x280/0x280 [ 317.541859][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 317.547391][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 317.552311][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 317.557402][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 317.562234][ T9112] try_charge+0xf4b/0x1440 [ 317.566647][ T9112] ? find_held_lock+0x35/0x130 [ 317.571410][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 317.576941][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 317.582480][ T9112] ? find_held_lock+0x35/0x130 [ 317.587223][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 317.592751][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 317.598300][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 317.603477][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 317.609001][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 317.614092][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 317.619443][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 317.624966][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 317.630659][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 317.635860][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 317.641146][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 317.646183][ T9112] ? __kasan_check_read+0x11/0x20 [ 317.651215][ T9112] copy_process+0x3f8/0x6880 [ 317.656042][ T9112] ? __kasan_check_read+0x11/0x20 [ 317.661059][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 317.666071][ T9112] ? __kasan_check_read+0x11/0x20 [ 317.671082][ T9112] ? mark_lock+0xc2/0x1220 [ 317.675492][ T9112] ? __cleanup_sighand+0x60/0x60 [ 317.680415][ T9112] ? find_held_lock+0x35/0x130 [ 317.685342][ T9112] _do_fork+0x146/0xf90 [ 317.689494][ T9112] ? copy_init_mm+0x20/0x20 [ 317.693991][ T9112] ? __kasan_check_read+0x11/0x20 [ 317.699083][ T9112] ? _copy_to_user+0x118/0x160 [ 317.703927][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.710148][ T9112] ? put_timespec64+0xda/0x140 [ 317.714896][ T9112] __x64_sys_clone+0x18d/0x250 [ 317.719640][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 317.724500][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 317.729764][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 317.734771][ T9112] do_syscall_64+0xfa/0x760 [ 317.739257][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.745582][ T9112] RIP: 0033:0x45851a [ 317.749470][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 317.769070][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.777486][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 317.785453][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 317.793409][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 317.801376][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 317.809344][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 317.824101][ T9112] memory: usage 37008kB, limit 0kB, failcnt 109 [ 317.830375][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 317.839379][ T9112] Memory cgroup stats for /syz3: [ 317.839449][ T9112] anon 31105024 [ 317.839449][ T9112] file 36864 [ 317.839449][ T9112] kernel_stack 524288 [ 317.839449][ T9112] slab 4440064 [ 317.839449][ T9112] sock 0 [ 317.839449][ T9112] shmem 0 [ 317.839449][ T9112] file_mapped 0 [ 317.839449][ T9112] file_dirty 0 [ 317.839449][ T9112] file_writeback 0 [ 317.839449][ T9112] anon_thp 18874368 [ 317.839449][ T9112] inactive_anon 6701056 [ 317.839449][ T9112] active_anon 24608768 [ 317.839449][ T9112] inactive_file 32768 [ 317.839449][ T9112] active_file 24576 [ 317.839449][ T9112] unevictable 45056 [ 317.839449][ T9112] slab_reclaimable 1216512 [ 317.839449][ T9112] slab_unreclaimable 3223552 [ 317.839449][ T9112] pgfault 19437 [ 317.839449][ T9112] pgmajfault 0 [ 317.839449][ T9112] workingset_refault 0 [ 317.839449][ T9112] workingset_activate 0 [ 317.839449][ T9112] workingset_nodereclaim 0 [ 317.839449][ T9112] pgrefill 370 [ 317.839449][ T9112] pgscan 899 [ 317.839449][ T9112] pgsteal 565 [ 317.938700][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12344,uid=0 [ 317.954936][ T9112] Memory cgroup out of memory: Killed process 12344 (syz-executor.3) total-vm:60568kB, anon-rss:6204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 317.976446][ T1080] oom_reaper: reaped process 12344 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 317.977873][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 318.006973][ T9115] CPU: 1 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 318.015931][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.025984][ T9115] Call Trace: [ 318.029284][ T9115] dump_stack+0x172/0x1f0 [ 318.033610][ T9115] dump_header+0x177/0x1152 [ 318.038108][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 318.043898][ T9115] ? ___ratelimit+0x2c8/0x595 [ 318.048580][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 318.054370][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.059649][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 318.064675][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 318.070301][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 318.076109][ T9115] ? ___ratelimit+0x60/0x595 [ 318.080689][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 318.085787][ T9115] oom_kill_process.cold+0x10/0x15 [ 318.090885][ T9115] out_of_memory+0x334/0x1340 [ 318.095544][ T9115] ? lock_downgrade+0x920/0x920 [ 318.100379][ T9115] ? oom_killer_disable+0x280/0x280 [ 318.105568][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 318.111103][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 318.116027][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 318.121128][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 318.125976][ T9115] try_charge+0xf4b/0x1440 [ 318.130375][ T9115] ? find_held_lock+0x35/0x130 [ 318.135128][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 318.140664][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 318.146192][ T9115] ? find_held_lock+0x35/0x130 [ 318.150950][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 318.157100][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 318.162642][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 318.168780][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 318.174326][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 318.179426][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 318.184826][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 318.190547][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 318.196250][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 318.201453][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.206723][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 318.211730][ T9115] ? __kasan_check_read+0x11/0x20 [ 318.216743][ T9115] copy_process+0x3f8/0x6880 [ 318.221317][ T9115] ? __kasan_check_read+0x11/0x20 [ 318.226323][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 318.231345][ T9115] ? __kasan_check_read+0x11/0x20 [ 318.236370][ T9115] ? mark_lock+0xc2/0x1220 [ 318.240775][ T9115] ? __cleanup_sighand+0x60/0x60 [ 318.245730][ T9115] ? find_held_lock+0x35/0x130 [ 318.250488][ T9115] _do_fork+0x146/0xf90 [ 318.254628][ T9115] ? copy_init_mm+0x20/0x20 [ 318.259119][ T9115] ? __kasan_check_read+0x11/0x20 [ 318.264139][ T9115] ? _copy_to_user+0x118/0x160 [ 318.268899][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.275132][ T9115] ? put_timespec64+0xda/0x140 [ 318.279912][ T9115] __x64_sys_clone+0x18d/0x250 [ 318.284767][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 318.289619][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.294906][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 318.299941][ T9115] do_syscall_64+0xfa/0x760 [ 318.304481][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.310383][ T9115] RIP: 0033:0x45851a [ 318.314271][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 318.333886][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 318.343515][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a 13:10:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 318.351912][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 318.359887][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 318.367853][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 318.375822][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 318.429937][ T9115] memory: usage 8064kB, limit 0kB, failcnt 283 [ 318.437885][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 318.445240][ T9115] Memory cgroup stats for /syz4: [ 318.445354][ T9115] anon 4554752 [ 318.445354][ T9115] file 69632 [ 318.445354][ T9115] kernel_stack 131072 [ 318.445354][ T9115] slab 3616768 [ 318.445354][ T9115] sock 0 [ 318.445354][ T9115] shmem 0 [ 318.445354][ T9115] file_mapped 0 [ 318.445354][ T9115] file_dirty 135168 [ 318.445354][ T9115] file_writeback 0 13:10:37 executing program 5: unshare(0x24020400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_getsetattr(r0, 0x0, 0x0) [ 318.445354][ T9115] anon_thp 4194304 [ 318.445354][ T9115] inactive_anon 0 [ 318.445354][ T9115] active_anon 4554752 [ 318.445354][ T9115] inactive_file 0 [ 318.445354][ T9115] active_file 0 [ 318.445354][ T9115] unevictable 0 [ 318.445354][ T9115] slab_reclaimable 1486848 [ 318.445354][ T9115] slab_unreclaimable 2129920 [ 318.445354][ T9115] pgfault 14619 [ 318.445354][ T9115] pgmajfault 0 [ 318.445354][ T9115] workingset_refault 0 [ 318.445354][ T9115] workingset_activate 0 [ 318.445354][ T9115] workingset_nodereclaim 0 [ 318.445354][ T9115] pgrefill 33 [ 318.445354][ T9115] pgscan 33 [ 318.445354][ T9115] pgsteal 0 [ 318.445354][ T9115] pgactivate 0 [ 318.545104][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11691,uid=0 [ 318.563920][ T9115] Memory cgroup out of memory: Killed process 11691 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 318.596994][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 318.611334][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 318.620601][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.630687][ T9112] Call Trace: [ 318.633990][ T9112] dump_stack+0x172/0x1f0 [ 318.638338][ T9112] dump_header+0x177/0x1152 [ 318.642860][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 318.648676][ T9112] ? ___ratelimit+0x2c8/0x595 [ 318.653369][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 318.659199][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.664585][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 318.669630][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 318.675287][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 318.681120][ T9112] ? ___ratelimit+0x60/0x595 [ 318.685726][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 318.690851][ T9112] oom_kill_process.cold+0x10/0x15 [ 318.695973][ T9112] out_of_memory+0x334/0x1340 [ 318.701100][ T9112] ? lock_downgrade+0x920/0x920 [ 318.705970][ T9112] ? oom_killer_disable+0x280/0x280 [ 318.711189][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 318.716741][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 318.721690][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 318.726813][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 318.731678][ T9112] try_charge+0xf4b/0x1440 [ 318.736098][ T9112] ? find_held_lock+0x35/0x130 [ 318.740902][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 318.746814][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 318.752374][ T9112] ? find_held_lock+0x35/0x130 [ 318.757146][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 318.762712][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 318.768272][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 318.773484][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 318.779068][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 318.784188][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 318.789570][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 318.795128][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 318.800853][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 318.806084][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.811496][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 318.816533][ T9112] ? __kasan_check_read+0x11/0x20 [ 318.821843][ T9112] copy_process+0x3f8/0x6880 [ 318.826441][ T9112] ? __kasan_check_read+0x11/0x20 [ 318.831479][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 318.836504][ T9112] ? __kasan_check_read+0x11/0x20 [ 318.841544][ T9112] ? mark_lock+0xc2/0x1220 [ 318.845978][ T9112] ? __cleanup_sighand+0x60/0x60 [ 318.850915][ T9112] ? find_held_lock+0x35/0x130 [ 318.855691][ T9112] _do_fork+0x146/0xf90 [ 318.859858][ T9112] ? copy_init_mm+0x20/0x20 [ 318.864373][ T9112] ? __kasan_check_read+0x11/0x20 [ 318.869407][ T9112] ? _copy_to_user+0x118/0x160 [ 318.874185][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 318.880436][ T9112] ? put_timespec64+0xda/0x140 [ 318.885210][ T9112] __x64_sys_clone+0x18d/0x250 [ 318.889993][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 318.895030][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 318.900320][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 318.905351][ T9112] do_syscall_64+0xfa/0x760 [ 318.909864][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.915752][ T9112] RIP: 0033:0x45851a [ 318.919654][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 318.939264][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 318.947683][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 318.955664][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 318.964000][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 318.972005][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 318.979980][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 319.000965][ T9112] memory: usage 34780kB, limit 0kB, failcnt 115 [ 319.007376][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 319.020776][ T9112] Memory cgroup stats for /syz3: [ 319.020851][ T9112] anon 29057024 [ 319.020851][ T9112] file 36864 [ 319.020851][ T9112] kernel_stack 524288 [ 319.020851][ T9112] slab 4440064 [ 319.020851][ T9112] sock 0 [ 319.020851][ T9112] shmem 0 [ 319.020851][ T9112] file_mapped 0 [ 319.020851][ T9112] file_dirty 0 [ 319.020851][ T9112] file_writeback 0 [ 319.020851][ T9112] anon_thp 18874368 [ 319.020851][ T9112] inactive_anon 4673536 [ 319.020851][ T9112] active_anon 24608768 [ 319.020851][ T9112] inactive_file 32768 [ 319.020851][ T9112] active_file 24576 [ 319.020851][ T9112] unevictable 45056 [ 319.020851][ T9112] slab_reclaimable 1216512 [ 319.020851][ T9112] slab_unreclaimable 3223552 [ 319.020851][ T9112] pgfault 19437 [ 319.020851][ T9112] pgmajfault 0 [ 319.020851][ T9112] workingset_refault 0 [ 319.020851][ T9112] workingset_activate 0 [ 319.020851][ T9112] workingset_nodereclaim 0 [ 319.020851][ T9112] pgrefill 404 [ 319.020851][ T9112] pgscan 932 [ 319.020851][ T9112] pgsteal 565 [ 319.116337][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12355,uid=0 [ 319.131887][ T9112] Memory cgroup out of memory: Killed process 12355 (syz-executor.3) total-vm:60700kB, anon-rss:4412kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 319.149862][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 319.153029][ T1080] oom_reaper: reaped process 12355 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 319.163926][ T9115] CPU: 1 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 319.181654][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.192237][ T9115] Call Trace: [ 319.195552][ T9115] dump_stack+0x172/0x1f0 [ 319.200045][ T9115] dump_header+0x177/0x1152 [ 319.204545][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 319.210441][ T9115] ? ___ratelimit+0x2c8/0x595 [ 319.215113][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 319.221012][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 319.226302][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 319.231406][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 319.237056][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 319.242846][ T9115] ? ___ratelimit+0x60/0x595 [ 319.247437][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 319.252544][ T9115] oom_kill_process.cold+0x10/0x15 [ 319.257647][ T9115] out_of_memory+0x334/0x1340 [ 319.262305][ T9115] ? lock_downgrade+0x920/0x920 [ 319.267313][ T9115] ? oom_killer_disable+0x280/0x280 [ 319.272516][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 319.278052][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 319.282973][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 319.288165][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 319.293010][ T9115] try_charge+0xf4b/0x1440 [ 319.297417][ T9115] ? find_held_lock+0x35/0x130 [ 319.302166][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 319.310122][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 319.315659][ T9115] ? find_held_lock+0x35/0x130 [ 319.320415][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 319.325968][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 319.331871][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 319.337081][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 319.342606][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 319.347698][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 319.353059][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 319.358794][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 319.364853][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 319.370053][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 319.375326][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 319.380340][ T9115] ? __kasan_check_read+0x11/0x20 [ 319.385362][ T9115] copy_process+0x3f8/0x6880 [ 319.389946][ T9115] ? __kasan_check_read+0x11/0x20 [ 319.394963][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 319.399988][ T9115] ? __kasan_check_read+0x11/0x20 [ 319.405007][ T9115] ? mark_lock+0xc2/0x1220 [ 319.409422][ T9115] ? __cleanup_sighand+0x60/0x60 [ 319.414352][ T9115] ? find_held_lock+0x35/0x130 [ 319.419391][ T9115] _do_fork+0x146/0xf90 [ 319.423541][ T9115] ? copy_init_mm+0x20/0x20 [ 319.428044][ T9115] ? __kasan_check_read+0x11/0x20 [ 319.433318][ T9115] ? _copy_to_user+0x118/0x160 [ 319.438078][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.444301][ T9115] ? put_timespec64+0xda/0x140 [ 319.449045][ T9115] __x64_sys_clone+0x18d/0x250 [ 319.453801][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 319.458644][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 319.463913][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 319.468920][ T9115] do_syscall_64+0xfa/0x760 [ 319.473416][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.479316][ T9115] RIP: 0033:0x45851a [ 319.483293][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 319.502906][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.511344][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 319.522018][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 319.529989][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 319.537945][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 319.546160][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 319.556039][ T9115] memory: usage 5740kB, limit 0kB, failcnt 289 [ 319.562582][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 319.569584][ T9115] Memory cgroup stats for /syz4: [ 319.569685][ T9115] anon 2330624 [ 319.569685][ T9115] file 69632 [ 319.569685][ T9115] kernel_stack 65536 [ 319.569685][ T9115] slab 3616768 [ 319.569685][ T9115] sock 0 [ 319.569685][ T9115] shmem 0 [ 319.569685][ T9115] file_mapped 0 [ 319.569685][ T9115] file_dirty 135168 [ 319.569685][ T9115] file_writeback 0 [ 319.569685][ T9115] anon_thp 2097152 [ 319.569685][ T9115] inactive_anon 0 [ 319.569685][ T9115] active_anon 2330624 [ 319.569685][ T9115] inactive_file 0 [ 319.569685][ T9115] active_file 0 [ 319.569685][ T9115] unevictable 0 [ 319.569685][ T9115] slab_reclaimable 1486848 [ 319.569685][ T9115] slab_unreclaimable 2129920 [ 319.569685][ T9115] pgfault 14619 [ 319.569685][ T9115] pgmajfault 0 [ 319.569685][ T9115] workingset_refault 0 [ 319.569685][ T9115] workingset_activate 0 [ 319.569685][ T9115] workingset_nodereclaim 0 [ 319.569685][ T9115] pgrefill 33 [ 319.569685][ T9115] pgscan 33 [ 319.569685][ T9115] pgsteal 0 [ 319.569685][ T9115] pgactivate 0 [ 319.668456][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11669,uid=0 [ 319.684245][ T9115] Memory cgroup out of memory: Killed process 11669 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 319.703296][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 319.713042][ T1080] oom_reaper: reaped process 11669 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 319.717664][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 319.735154][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.745210][ T9112] Call Trace: [ 319.748511][ T9112] dump_stack+0x172/0x1f0 [ 319.752961][ T9112] dump_header+0x177/0x1152 [ 319.757760][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 319.763917][ T9112] ? ___ratelimit+0x2c8/0x595 [ 319.768611][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 319.774413][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 319.779691][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 319.784804][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 319.790441][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 319.796242][ T9112] ? ___ratelimit+0x60/0x595 [ 319.800908][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 319.806004][ T9112] oom_kill_process.cold+0x10/0x15 [ 319.811108][ T9112] out_of_memory+0x334/0x1340 [ 319.815779][ T9112] ? lock_downgrade+0x920/0x920 [ 319.821065][ T9112] ? oom_killer_disable+0x280/0x280 [ 319.826263][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 319.831801][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 319.836748][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 319.841869][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 319.846742][ T9112] try_charge+0xf4b/0x1440 [ 319.851153][ T9112] ? find_held_lock+0x35/0x130 [ 319.855922][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 319.861488][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 319.867033][ T9112] ? find_held_lock+0x35/0x130 [ 319.871794][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 319.877361][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 319.882906][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 319.888101][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 319.893633][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 319.898745][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 319.904115][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 319.909674][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 319.915381][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 319.920577][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 319.925844][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 319.930951][ T9112] ? __kasan_check_read+0x11/0x20 [ 319.935963][ T9112] copy_process+0x3f8/0x6880 [ 319.940546][ T9112] ? __kasan_check_read+0x11/0x20 [ 319.945587][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 319.951160][ T9112] ? __kasan_check_read+0x11/0x20 [ 319.956176][ T9112] ? mark_lock+0xc2/0x1220 [ 319.960575][ T9112] ? __cleanup_sighand+0x60/0x60 [ 319.965507][ T9112] ? find_held_lock+0x35/0x130 [ 319.970624][ T9112] _do_fork+0x146/0xf90 [ 319.974760][ T9112] ? copy_init_mm+0x20/0x20 [ 319.979262][ T9112] ? __kasan_check_read+0x11/0x20 [ 319.984279][ T9112] ? _copy_to_user+0x118/0x160 [ 319.989042][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.995361][ T9112] ? put_timespec64+0xda/0x140 [ 320.000121][ T9112] __x64_sys_clone+0x18d/0x250 [ 320.004882][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 320.009732][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 320.014995][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 320.020000][ T9112] do_syscall_64+0xfa/0x760 [ 320.024497][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.030417][ T9112] RIP: 0033:0x45851a [ 320.034294][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 320.054054][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 320.062458][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 320.070420][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 320.078401][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 320.086626][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 320.094584][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 320.104491][ T9112] memory: usage 30192kB, limit 0kB, failcnt 121 [ 320.118158][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 320.126338][ T9112] Memory cgroup stats for /syz3: [ 320.126443][ T9112] anon 24506368 [ 320.126443][ T9112] file 36864 [ 320.126443][ T9112] kernel_stack 458752 [ 320.126443][ T9112] slab 4440064 [ 320.126443][ T9112] sock 0 [ 320.126443][ T9112] shmem 0 [ 320.126443][ T9112] file_mapped 0 [ 320.126443][ T9112] file_dirty 0 [ 320.126443][ T9112] file_writeback 0 [ 320.126443][ T9112] anon_thp 16777216 [ 320.126443][ T9112] inactive_anon 249856 [ 320.126443][ T9112] active_anon 24608768 [ 320.126443][ T9112] inactive_file 32768 [ 320.126443][ T9112] active_file 24576 [ 320.126443][ T9112] unevictable 45056 [ 320.126443][ T9112] slab_reclaimable 1216512 [ 320.126443][ T9112] slab_unreclaimable 3223552 [ 320.126443][ T9112] pgfault 19437 [ 320.126443][ T9112] pgmajfault 0 [ 320.126443][ T9112] workingset_refault 0 [ 320.126443][ T9112] workingset_activate 0 [ 320.126443][ T9112] workingset_nodereclaim 0 [ 320.126443][ T9112] pgrefill 404 [ 320.126443][ T9112] pgscan 932 [ 320.126443][ T9112] pgsteal 565 [ 320.223323][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10908,uid=0 [ 320.239398][ T9112] Memory cgroup out of memory: Killed process 10908 (syz-executor.3) total-vm:72716kB, anon-rss:2212kB, file-rss:35952kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 320.274266][ T9115] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 320.288658][ T9115] CPU: 1 PID: 9115 Comm: syz-executor.4 Not tainted 5.4.0-rc5-next-20191029 #0 [ 320.298063][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.308930][ T9115] Call Trace: [ 320.308957][ T9115] dump_stack+0x172/0x1f0 [ 320.308975][ T9115] dump_header+0x177/0x1152 [ 320.308989][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 320.309001][ T9115] ? ___ratelimit+0x2c8/0x595 [ 320.309012][ T9115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 320.309026][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 320.309040][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 320.309054][ T9115] ? pagefault_out_of_memory+0x11c/0x11c [ 320.309067][ T9115] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 320.309081][ T9115] ? ___ratelimit+0x60/0x595 [ 320.309092][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 320.309120][ T9115] oom_kill_process.cold+0x10/0x15 [ 320.309137][ T9115] out_of_memory+0x334/0x1340 [ 320.309149][ T9115] ? lock_downgrade+0x920/0x920 [ 320.309172][ T9115] ? oom_killer_disable+0x280/0x280 [ 320.309194][ T9115] mem_cgroup_out_of_memory+0x1d8/0x240 [ 320.322413][ T9115] ? memcg_stat_show+0xc30/0xc30 [ 320.322433][ T9115] ? do_raw_spin_unlock+0x57/0x270 [ 320.322449][ T9115] ? _raw_spin_unlock+0x28/0x40 [ 320.322464][ T9115] try_charge+0xf4b/0x1440 [ 320.322479][ T9115] ? find_held_lock+0x35/0x130 [ 320.322506][ T9115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 320.429409][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 320.435568][ T9115] ? find_held_lock+0x35/0x130 [ 320.440356][ T9115] ? get_mem_cgroup_from_mm+0x139/0x310 [ 320.445913][ T9115] __memcg_kmem_charge_memcg+0x7c/0x130 [ 320.451482][ T9115] ? memcg_kmem_put_cache+0x50/0x50 [ 320.457130][ T9115] ? get_mem_cgroup_from_mm+0x151/0x310 [ 320.462685][ T9115] __memcg_kmem_charge+0x13a/0x3a0 [ 320.467792][ T9115] __alloc_pages_nodemask+0x4f5/0x910 [ 320.473162][ T9115] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 320.478860][ T9115] ? __alloc_pages_slowpath+0x2920/0x2920 [ 320.484579][ T9115] ? percpu_ref_put_many+0xb1/0x180 [ 320.489771][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 320.495045][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 320.500052][ T9115] ? __kasan_check_read+0x11/0x20 [ 320.505068][ T9115] copy_process+0x3f8/0x6880 [ 320.510802][ T9115] ? __kasan_check_read+0x11/0x20 [ 320.516178][ T9115] ? __lock_acquire+0x16f2/0x4a00 [ 320.521204][ T9115] ? __kasan_check_read+0x11/0x20 [ 320.526305][ T9115] ? mark_lock+0xc2/0x1220 [ 320.530718][ T9115] ? __cleanup_sighand+0x60/0x60 [ 320.535790][ T9115] ? find_held_lock+0x35/0x130 [ 320.540664][ T9115] _do_fork+0x146/0xf90 [ 320.544844][ T9115] ? copy_init_mm+0x20/0x20 [ 320.549357][ T9115] ? __kasan_check_read+0x11/0x20 [ 320.554376][ T9115] ? _copy_to_user+0x118/0x160 [ 320.559137][ T9115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.565607][ T9115] ? put_timespec64+0xda/0x140 [ 320.570796][ T9115] __x64_sys_clone+0x18d/0x250 [ 320.575561][ T9115] ? __ia32_sys_vfork+0xc0/0xc0 [ 320.580567][ T9115] ? lockdep_hardirqs_on+0x421/0x5e0 [ 320.586561][ T9115] ? trace_hardirqs_on+0x67/0x240 [ 320.592219][ T9115] do_syscall_64+0xfa/0x760 [ 320.596739][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.602620][ T9115] RIP: 0033:0x45851a [ 320.606528][ T9115] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 320.626120][ T9115] RSP: 002b:00007ffcb6f1aa00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 320.634527][ T9115] RAX: ffffffffffffffda RBX: 00007ffcb6f1aa00 RCX: 000000000045851a [ 320.642500][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 320.650605][ T9115] RBP: 00007ffcb6f1aa40 R08: 0000000000000001 R09: 00000000010a1940 [ 320.658579][ T9115] R10: 00000000010a1c10 R11: 0000000000000246 R12: 0000000000000001 [ 320.666542][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcb6f1aa90 [ 320.676681][ T9115] memory: usage 3364kB, limit 0kB, failcnt 295 [ 320.682961][ T9115] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 320.690242][ T9115] Memory cgroup stats for /syz4: [ 320.690373][ T9115] anon 94208 [ 320.690373][ T9115] file 69632 [ 320.690373][ T9115] kernel_stack 0 [ 320.690373][ T9115] slab 3616768 [ 320.690373][ T9115] sock 0 [ 320.690373][ T9115] shmem 0 [ 320.690373][ T9115] file_mapped 0 [ 320.690373][ T9115] file_dirty 135168 [ 320.690373][ T9115] file_writeback 0 [ 320.690373][ T9115] anon_thp 0 [ 320.690373][ T9115] inactive_anon 0 [ 320.690373][ T9115] active_anon 94208 [ 320.690373][ T9115] inactive_file 0 [ 320.690373][ T9115] active_file 0 [ 320.690373][ T9115] unevictable 0 [ 320.690373][ T9115] slab_reclaimable 1486848 [ 320.690373][ T9115] slab_unreclaimable 2129920 [ 320.690373][ T9115] pgfault 14619 [ 320.690373][ T9115] pgmajfault 0 [ 320.690373][ T9115] workingset_refault 0 [ 320.690373][ T9115] workingset_activate 0 [ 320.690373][ T9115] workingset_nodereclaim 0 [ 320.690373][ T9115] pgrefill 33 [ 320.690373][ T9115] pgscan 33 [ 320.690373][ T9115] pgsteal 0 [ 320.690373][ T9115] pgactivate 0 [ 320.787805][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9115,uid=0 [ 320.803734][ T9115] Memory cgroup out of memory: Killed process 9115 (syz-executor.4) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 320.821891][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 320.822349][ T1080] oom_reaper: reaped process 9115 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 320.834602][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 320.854020][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.864497][ T9112] Call Trace: [ 320.867799][ T9112] dump_stack+0x172/0x1f0 [ 320.872117][ T9112] dump_header+0x177/0x1152 [ 320.876608][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 320.882403][ T9112] ? ___ratelimit+0x2c8/0x595 [ 320.887073][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 320.892874][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 320.898138][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 320.903168][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 320.908804][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 320.914619][ T9112] ? ___ratelimit+0x60/0x595 [ 320.919560][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 320.924765][ T9112] oom_kill_process.cold+0x10/0x15 [ 320.929881][ T9112] out_of_memory+0x334/0x1340 [ 320.935469][ T9112] ? lock_downgrade+0x920/0x920 [ 320.940653][ T9112] ? oom_killer_disable+0x280/0x280 [ 320.945874][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 320.951433][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 320.956794][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 320.961901][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 320.966768][ T9112] try_charge+0xf4b/0x1440 [ 320.971168][ T9112] ? find_held_lock+0x35/0x130 [ 320.975926][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 320.981507][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 320.987064][ T9112] ? find_held_lock+0x35/0x130 [ 320.991832][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 320.997365][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 321.002909][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 321.008115][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 321.013986][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 321.019519][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 321.025276][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 321.030925][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 321.036791][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 321.042290][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 321.047720][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 321.052773][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.057799][ T9112] copy_process+0x3f8/0x6880 [ 321.062485][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.067503][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 321.072619][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.077636][ T9112] ? mark_lock+0xc2/0x1220 [ 321.082048][ T9112] ? __cleanup_sighand+0x60/0x60 [ 321.086994][ T9112] ? find_held_lock+0x35/0x130 [ 321.091760][ T9112] _do_fork+0x146/0xf90 [ 321.095896][ T9112] ? copy_init_mm+0x20/0x20 [ 321.100396][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.105772][ T9112] ? _copy_to_user+0x118/0x160 [ 321.110542][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.116953][ T9112] ? put_timespec64+0xda/0x140 [ 321.121713][ T9112] __x64_sys_clone+0x18d/0x250 [ 321.126493][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 321.131345][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 321.136616][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 321.141649][ T9112] do_syscall_64+0xfa/0x760 [ 321.146775][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.152774][ T9112] RIP: 0033:0x45851a [ 321.156795][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 321.176482][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.184906][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 321.192976][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 321.201200][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 321.209435][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 321.217391][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 321.227824][ T9112] memory: usage 27300kB, limit 0kB, failcnt 127 [ 321.234163][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.246675][ T9112] Memory cgroup stats for /syz3: [ 321.246807][ T9112] anon 22310912 [ 321.246807][ T9112] file 36864 [ 321.246807][ T9112] kernel_stack 393216 [ 321.246807][ T9112] slab 4038656 [ 321.246807][ T9112] sock 0 [ 321.246807][ T9112] shmem 0 [ 321.246807][ T9112] file_mapped 0 [ 321.246807][ T9112] file_dirty 0 [ 321.246807][ T9112] file_writeback 0 [ 321.246807][ T9112] anon_thp 14680064 [ 321.246807][ T9112] inactive_anon 249856 [ 321.246807][ T9112] active_anon 22347776 [ 321.246807][ T9112] inactive_file 32768 [ 321.246807][ T9112] active_file 24576 [ 321.246807][ T9112] unevictable 45056 [ 321.246807][ T9112] slab_reclaimable 1216512 [ 321.246807][ T9112] slab_unreclaimable 2822144 [ 321.246807][ T9112] pgfault 19437 [ 321.246807][ T9112] pgmajfault 0 [ 321.246807][ T9112] workingset_refault 0 [ 321.246807][ T9112] workingset_activate 0 [ 321.246807][ T9112] workingset_nodereclaim 0 [ 321.246807][ T9112] pgrefill 437 [ 321.246807][ T9112] pgscan 965 [ 321.246807][ T9112] pgsteal 565 [ 321.252798][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10960,uid=0 [ 321.360236][ T9112] Memory cgroup out of memory: Killed process 10960 (syz-executor.3) total-vm:72716kB, anon-rss:2212kB, file-rss:35892kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 321.380140][ T1080] oom_reaper: reaped process 10960 (syz-executor.3), now anon-rss:0kB, file-rss:34932kB, shmem-rss:0kB [ 321.380903][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 321.403862][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 321.412800][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.422849][ T9112] Call Trace: [ 321.426123][ T9112] dump_stack+0x172/0x1f0 [ 321.430436][ T9112] dump_header+0x177/0x1152 [ 321.435115][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 321.440913][ T9112] ? ___ratelimit+0x2c8/0x595 [ 321.445600][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 321.451410][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 321.456707][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 321.461913][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 321.467532][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 321.473334][ T9112] ? ___ratelimit+0x60/0x595 [ 321.477914][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 321.483009][ T9112] oom_kill_process.cold+0x10/0x15 [ 321.488100][ T9112] out_of_memory+0x334/0x1340 [ 321.492775][ T9112] ? lock_downgrade+0x920/0x920 [ 321.497631][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 321.503428][ T9112] ? oom_killer_disable+0x280/0x280 [ 321.508621][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 321.514176][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 321.519131][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 321.524247][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 321.529097][ T9112] try_charge+0xf4b/0x1440 [ 321.533507][ T9112] ? find_held_lock+0x35/0x130 [ 321.538308][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 321.543849][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 321.549375][ T9112] ? find_held_lock+0x35/0x130 [ 321.554132][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 321.559675][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 321.565296][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 321.570474][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 321.576002][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 321.581105][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 321.586467][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 321.592523][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 321.598229][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 321.603423][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 321.608684][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 321.613821][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.618845][ T9112] copy_process+0x3f8/0x6880 [ 321.623416][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.628419][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 321.633448][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.639425][ T9112] ? mark_lock+0xc2/0x1220 [ 321.643838][ T9112] ? __cleanup_sighand+0x60/0x60 [ 321.648754][ T9112] ? find_held_lock+0x35/0x130 [ 321.653531][ T9112] _do_fork+0x146/0xf90 [ 321.657987][ T9112] ? copy_init_mm+0x20/0x20 [ 321.662495][ T9112] ? __kasan_check_read+0x11/0x20 [ 321.667518][ T9112] ? _copy_to_user+0x118/0x160 [ 321.672292][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.679401][ T9112] ? put_timespec64+0xda/0x140 [ 321.684161][ T9112] __x64_sys_clone+0x18d/0x250 [ 321.688923][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 321.693769][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 321.699059][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 321.704067][ T9112] do_syscall_64+0xfa/0x760 [ 321.708551][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.714427][ T9112] RIP: 0033:0x45851a [ 321.718314][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 321.737908][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.746403][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 321.755498][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 321.763512][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 321.771479][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 321.779463][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 321.789621][ T9112] memory: usage 24960kB, limit 0kB, failcnt 133 [ 321.795987][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.803203][ T9112] Memory cgroup stats for /syz3: [ 321.803319][ T9112] anon 20115456 [ 321.803319][ T9112] file 36864 [ 321.803319][ T9112] kernel_stack 393216 [ 321.803319][ T9112] slab 4038656 [ 321.803319][ T9112] sock 0 [ 321.803319][ T9112] shmem 0 [ 321.803319][ T9112] file_mapped 0 [ 321.803319][ T9112] file_dirty 0 [ 321.803319][ T9112] file_writeback 0 [ 321.803319][ T9112] anon_thp 12582912 [ 321.803319][ T9112] inactive_anon 249856 [ 321.803319][ T9112] active_anon 20115456 [ 321.803319][ T9112] inactive_file 32768 [ 321.803319][ T9112] active_file 24576 [ 321.803319][ T9112] unevictable 45056 [ 321.803319][ T9112] slab_reclaimable 1216512 [ 321.803319][ T9112] slab_unreclaimable 2822144 [ 321.803319][ T9112] pgfault 19437 [ 321.803319][ T9112] pgmajfault 0 [ 321.803319][ T9112] workingset_refault 0 [ 321.803319][ T9112] workingset_activate 0 [ 321.803319][ T9112] workingset_nodereclaim 0 [ 321.803319][ T9112] pgrefill 437 [ 321.803319][ T9112] pgscan 998 [ 321.803319][ T9112] pgsteal 565 [ 321.897235][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10941,uid=0 [ 321.913780][ T9112] Memory cgroup out of memory: Killed process 10941 (syz-executor.3) total-vm:72716kB, anon-rss:2212kB, file-rss:35876kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 321.950339][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 321.962319][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 321.971256][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.981304][ T9112] Call Trace: [ 321.984599][ T9112] dump_stack+0x172/0x1f0 [ 321.988930][ T9112] dump_header+0x177/0x1152 [ 321.993456][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 321.999369][ T9112] ? ___ratelimit+0x2c8/0x595 [ 322.004042][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 322.009845][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.015127][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.020154][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 322.025789][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 322.031798][ T9112] ? ___ratelimit+0x60/0x595 [ 322.036414][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 322.041528][ T9112] oom_kill_process.cold+0x10/0x15 [ 322.046636][ T9112] out_of_memory+0x334/0x1340 [ 322.051320][ T9112] ? lock_downgrade+0x920/0x920 [ 322.056182][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 322.062004][ T9112] ? oom_killer_disable+0x280/0x280 [ 322.067406][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 322.072955][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 322.077898][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 322.083011][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 322.087968][ T9112] try_charge+0xf4b/0x1440 [ 322.092384][ T9112] ? find_held_lock+0x35/0x130 [ 322.097177][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 322.102723][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 322.108262][ T9112] ? find_held_lock+0x35/0x130 [ 322.113023][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 322.118582][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 322.124137][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 322.129349][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 322.134907][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 322.140025][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 322.145394][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 322.150949][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 322.156666][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 322.161906][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.167237][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.172274][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.177777][ T9112] copy_process+0x3f8/0x6880 [ 322.182393][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.187420][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 322.192442][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.197909][ T9112] ? mark_lock+0xc2/0x1220 [ 322.202344][ T9112] ? __cleanup_sighand+0x60/0x60 [ 322.207673][ T9112] ? find_held_lock+0x35/0x130 [ 322.212711][ T9112] _do_fork+0x146/0xf90 [ 322.216861][ T9112] ? copy_init_mm+0x20/0x20 [ 322.221372][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.226377][ T9112] ? _copy_to_user+0x118/0x160 [ 322.231143][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.237461][ T9112] ? put_timespec64+0xda/0x140 [ 322.242235][ T9112] __x64_sys_clone+0x18d/0x250 [ 322.247000][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 322.251852][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.257245][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.262282][ T9112] do_syscall_64+0xfa/0x760 [ 322.266780][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.272781][ T9112] RIP: 0033:0x45851a [ 322.276677][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 322.296369][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 322.304794][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 322.312756][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 322.320732][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 322.328970][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 322.336939][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 322.347224][ T9112] memory: usage 22616kB, limit 0kB, failcnt 140 [ 322.357977][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 322.365296][ T9112] Memory cgroup stats for /syz3: [ 322.365406][ T9112] anon 17887232 [ 322.365406][ T9112] file 36864 [ 322.365406][ T9112] kernel_stack 393216 [ 322.365406][ T9112] slab 4038656 [ 322.365406][ T9112] sock 0 [ 322.365406][ T9112] shmem 0 [ 322.365406][ T9112] file_mapped 0 [ 322.365406][ T9112] file_dirty 0 [ 322.365406][ T9112] file_writeback 0 [ 322.365406][ T9112] anon_thp 10485760 [ 322.365406][ T9112] inactive_anon 249856 [ 322.365406][ T9112] active_anon 17887232 [ 322.365406][ T9112] inactive_file 32768 [ 322.365406][ T9112] active_file 24576 [ 322.365406][ T9112] unevictable 45056 [ 322.365406][ T9112] slab_reclaimable 1216512 [ 322.365406][ T9112] slab_unreclaimable 2822144 [ 322.365406][ T9112] pgfault 19437 [ 322.365406][ T9112] pgmajfault 0 [ 322.365406][ T9112] workingset_refault 0 [ 322.365406][ T9112] workingset_activate 0 [ 322.365406][ T9112] workingset_nodereclaim 0 [ 322.365406][ T9112] pgrefill 470 [ 322.365406][ T9112] pgscan 998 [ 322.365406][ T9112] pgsteal 565 [ 322.467769][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10868,uid=0 [ 322.483695][ T9112] Memory cgroup out of memory: Killed process 10868 (syz-executor.3) total-vm:72848kB, anon-rss:2220kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 322.503417][ T1080] oom_reaper: reaped process 10868 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 322.521835][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 322.542492][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 322.551458][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.561503][ T9112] Call Trace: [ 322.561526][ T9112] dump_stack+0x172/0x1f0 [ 322.561550][ T9112] dump_header+0x177/0x1152 [ 322.561566][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 322.561578][ T9112] ? ___ratelimit+0x2c8/0x595 [ 322.561591][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 322.561607][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.561622][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.561637][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 322.561651][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 322.561664][ T9112] ? ___ratelimit+0x60/0x595 [ 322.561680][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 322.573768][ T9112] oom_kill_process.cold+0x10/0x15 [ 322.629944][ T9112] out_of_memory+0x334/0x1340 [ 322.634653][ T9112] ? lock_downgrade+0x920/0x920 [ 322.639681][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 322.646010][ T9112] ? oom_killer_disable+0x280/0x280 [ 322.651211][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 322.656737][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 322.661681][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 322.666921][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 322.671781][ T9112] try_charge+0xf4b/0x1440 [ 322.676211][ T9112] ? find_held_lock+0x35/0x130 [ 322.680965][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 322.686674][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 322.692225][ T9112] ? find_held_lock+0x35/0x130 [ 322.697678][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 322.703228][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 322.708785][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 322.713967][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 322.719496][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 322.724605][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 322.729970][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 322.735510][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 322.741215][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 322.746432][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.751709][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.756718][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.761743][ T9112] copy_process+0x3f8/0x6880 [ 322.766363][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.771396][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 322.776420][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.781430][ T9112] ? mark_lock+0xc2/0x1220 [ 322.785877][ T9112] ? __cleanup_sighand+0x60/0x60 [ 322.790801][ T9112] ? find_held_lock+0x35/0x130 [ 322.795570][ T9112] _do_fork+0x146/0xf90 [ 322.799730][ T9112] ? copy_init_mm+0x20/0x20 [ 322.804229][ T9112] ? __kasan_check_read+0x11/0x20 [ 322.809248][ T9112] ? _copy_to_user+0x118/0x160 [ 322.814002][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.820220][ T9112] ? put_timespec64+0xda/0x140 [ 322.824982][ T9112] __x64_sys_clone+0x18d/0x250 [ 322.829744][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 322.834579][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 322.839842][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 322.844860][ T9112] do_syscall_64+0xfa/0x760 [ 322.849444][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.855940][ T9112] RIP: 0033:0x45851a [ 322.859822][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 322.879643][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 322.888185][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 322.896186][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 322.904440][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 322.912410][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 322.920378][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 322.929755][ T9112] memory: usage 20220kB, limit 0kB, failcnt 146 [ 322.936079][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 322.947137][ T9112] Memory cgroup stats for /syz3: [ 322.947280][ T9112] anon 15597568 [ 322.947280][ T9112] file 36864 [ 322.947280][ T9112] kernel_stack 327680 [ 322.947280][ T9112] slab 4038656 [ 322.947280][ T9112] sock 0 [ 322.947280][ T9112] shmem 0 [ 322.947280][ T9112] file_mapped 0 [ 322.947280][ T9112] file_dirty 0 [ 322.947280][ T9112] file_writeback 0 [ 322.947280][ T9112] anon_thp 8388608 [ 322.947280][ T9112] inactive_anon 249856 [ 322.947280][ T9112] active_anon 15601664 [ 322.947280][ T9112] inactive_file 32768 [ 322.947280][ T9112] active_file 24576 [ 322.947280][ T9112] unevictable 45056 [ 322.947280][ T9112] slab_reclaimable 1216512 [ 322.947280][ T9112] slab_unreclaimable 2822144 [ 322.947280][ T9112] pgfault 19437 [ 322.947280][ T9112] pgmajfault 0 [ 322.947280][ T9112] workingset_refault 0 [ 322.947280][ T9112] workingset_activate 0 [ 322.947280][ T9112] workingset_nodereclaim 0 [ 322.947280][ T9112] pgrefill 470 [ 322.947280][ T9112] pgscan 998 [ 322.947280][ T9112] pgsteal 565 [ 323.046984][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11756,uid=0 [ 323.067063][ T9112] Memory cgroup out of memory: Killed process 11756 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 323.086532][ T1080] oom_reaper: reaped process 11756 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 323.099766][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 323.112344][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 323.121634][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.131782][ T9112] Call Trace: [ 323.135061][ T9112] dump_stack+0x172/0x1f0 [ 323.139373][ T9112] dump_header+0x177/0x1152 [ 323.143876][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 323.153327][ T9112] ? ___ratelimit+0x2c8/0x595 [ 323.157987][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 323.163791][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 323.169343][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 323.174448][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 323.180064][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 323.185864][ T9112] ? ___ratelimit+0x60/0x595 [ 323.190459][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 323.195557][ T9112] oom_kill_process.cold+0x10/0x15 [ 323.200664][ T9112] out_of_memory+0x334/0x1340 [ 323.205333][ T9112] ? lock_downgrade+0x920/0x920 [ 323.210311][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 323.216204][ T9112] ? oom_killer_disable+0x280/0x280 [ 323.221412][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 323.226955][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 323.232054][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 323.237188][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 323.242849][ T9112] try_charge+0xf4b/0x1440 [ 323.247357][ T9112] ? find_held_lock+0x35/0x130 [ 323.252128][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 323.257786][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 323.263431][ T9112] ? find_held_lock+0x35/0x130 [ 323.268418][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 323.273963][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 323.279495][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 323.284726][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 323.290598][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 323.295723][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 323.302597][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 323.308145][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 323.314030][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 323.319212][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 323.324489][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 323.329502][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.334525][ T9112] copy_process+0x3f8/0x6880 [ 323.339146][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.344159][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 323.349182][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.354197][ T9112] ? mark_lock+0xc2/0x1220 [ 323.358889][ T9112] ? __cleanup_sighand+0x60/0x60 [ 323.364117][ T9112] ? find_held_lock+0x35/0x130 [ 323.369054][ T9112] _do_fork+0x146/0xf90 [ 323.373203][ T9112] ? copy_init_mm+0x20/0x20 [ 323.377708][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.384993][ T9112] ? _copy_to_user+0x118/0x160 [ 323.389774][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.396184][ T9112] ? put_timespec64+0xda/0x140 [ 323.401473][ T9112] __x64_sys_clone+0x18d/0x250 [ 323.406239][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 323.411110][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 323.416389][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 323.421407][ T9112] do_syscall_64+0xfa/0x760 [ 323.425917][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.431816][ T9112] RIP: 0033:0x45851a [ 323.435693][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 323.455694][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.464191][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 323.472506][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 323.480495][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 323.488477][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 323.496449][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 323.509977][ T9112] memory: usage 17836kB, limit 0kB, failcnt 152 [ 323.516651][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.523992][ T9112] Memory cgroup stats for /syz3: [ 323.526024][ T9112] anon 13389824 [ 323.526024][ T9112] file 36864 [ 323.526024][ T9112] kernel_stack 262144 [ 323.526024][ T9112] slab 4038656 [ 323.526024][ T9112] sock 0 [ 323.526024][ T9112] shmem 0 [ 323.526024][ T9112] file_mapped 0 [ 323.526024][ T9112] file_dirty 0 [ 323.526024][ T9112] file_writeback 0 [ 323.526024][ T9112] anon_thp 6291456 [ 323.526024][ T9112] inactive_anon 249856 [ 323.526024][ T9112] active_anon 13393920 [ 323.526024][ T9112] inactive_file 32768 [ 323.526024][ T9112] active_file 24576 [ 323.526024][ T9112] unevictable 45056 [ 323.526024][ T9112] slab_reclaimable 1216512 [ 323.526024][ T9112] slab_unreclaimable 2822144 [ 323.526024][ T9112] pgfault 19437 [ 323.526024][ T9112] pgmajfault 0 [ 323.526024][ T9112] workingset_refault 0 [ 323.526024][ T9112] workingset_activate 0 13:10:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 323.526024][ T9112] workingset_nodereclaim 0 [ 323.526024][ T9112] pgrefill 470 [ 323.526024][ T9112] pgscan 998 [ 323.526024][ T9112] pgsteal 565 [ 323.621987][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12762,uid=0 [ 323.637623][ T9112] Memory cgroup out of memory: Killed process 12762 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 323.694362][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 323.707133][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 323.716083][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.726148][ T9112] Call Trace: [ 323.729460][ T9112] dump_stack+0x172/0x1f0 [ 323.733813][ T9112] dump_header+0x177/0x1152 [ 323.738400][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 13:10:42 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x8800, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 323.744217][ T9112] ? ___ratelimit+0x2c8/0x595 [ 323.748910][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 323.755342][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 323.760645][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 323.765688][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 323.771339][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 323.777770][ T9112] ? ___ratelimit+0x60/0x595 [ 323.782375][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 323.787505][ T9112] oom_kill_process.cold+0x10/0x15 [ 323.792636][ T9112] out_of_memory+0x334/0x1340 [ 323.797329][ T9112] ? lock_downgrade+0x920/0x920 [ 323.802544][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 323.808373][ T9112] ? oom_killer_disable+0x280/0x280 [ 323.813769][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 323.819331][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 323.824289][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 323.829978][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 323.834850][ T9112] try_charge+0xf4b/0x1440 [ 323.839291][ T9112] ? find_held_lock+0x35/0x130 [ 323.844079][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 323.849645][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 323.855210][ T9112] ? find_held_lock+0x35/0x130 [ 323.860183][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 323.865760][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 323.871329][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 323.876897][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 323.882467][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 323.887692][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 323.893086][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 323.898654][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 323.904755][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 323.910066][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 323.915655][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 323.920715][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.925764][ T9112] copy_process+0x3f8/0x6880 [ 323.930402][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.935442][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 323.940478][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.945520][ T9112] ? mark_lock+0xc2/0x1220 [ 323.949967][ T9112] ? __cleanup_sighand+0x60/0x60 [ 323.954925][ T9112] ? find_held_lock+0x35/0x130 [ 323.959909][ T9112] _do_fork+0x146/0xf90 [ 323.964085][ T9112] ? copy_init_mm+0x20/0x20 [ 323.968604][ T9112] ? __kasan_check_read+0x11/0x20 [ 323.973642][ T9112] ? _copy_to_user+0x118/0x160 [ 323.978428][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.984751][ T9112] ? put_timespec64+0xda/0x140 [ 323.989578][ T9112] __x64_sys_clone+0x18d/0x250 [ 323.994455][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 323.999479][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 324.004780][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 324.009832][ T9112] do_syscall_64+0xfa/0x760 [ 324.014724][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.020630][ T9112] RIP: 0033:0x45851a [ 324.024558][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 324.044775][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.053211][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 324.061200][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 324.069470][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 324.077453][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 324.085434][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 324.095935][ T9112] memory: usage 15528kB, limit 0kB, failcnt 158 [ 324.111079][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 324.118050][ T9112] Memory cgroup stats for /syz3: [ 324.118178][ T9112] anon 11194368 [ 324.118178][ T9112] file 36864 [ 324.118178][ T9112] kernel_stack 196608 [ 324.118178][ T9112] slab 4038656 [ 324.118178][ T9112] sock 0 [ 324.118178][ T9112] shmem 0 [ 324.118178][ T9112] file_mapped 0 [ 324.118178][ T9112] file_dirty 0 [ 324.118178][ T9112] file_writeback 0 [ 324.118178][ T9112] anon_thp 6291456 [ 324.118178][ T9112] inactive_anon 249856 [ 324.118178][ T9112] active_anon 11231232 [ 324.118178][ T9112] inactive_file 32768 [ 324.118178][ T9112] active_file 24576 [ 324.118178][ T9112] unevictable 45056 [ 324.118178][ T9112] slab_reclaimable 1216512 [ 324.118178][ T9112] slab_unreclaimable 2822144 [ 324.118178][ T9112] pgfault 19437 [ 324.118178][ T9112] pgmajfault 0 [ 324.118178][ T9112] workingset_refault 0 [ 324.118178][ T9112] workingset_activate 0 [ 324.118178][ T9112] workingset_nodereclaim 0 [ 324.118178][ T9112] pgrefill 503 [ 324.118178][ T9112] pgscan 1031 [ 324.118178][ T9112] pgsteal 565 [ 324.223592][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12708,uid=0 [ 324.239222][ T9112] Memory cgroup out of memory: Killed process 12708 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 324.260254][ T1080] oom_reaper: reaped process 12708 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 324.274932][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 324.286907][ T9112] CPU: 1 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 324.295845][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.305899][ T9112] Call Trace: [ 324.309206][ T9112] dump_stack+0x172/0x1f0 [ 324.316147][ T9112] dump_header+0x177/0x1152 [ 324.320650][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 324.326467][ T9112] ? ___ratelimit+0x2c8/0x595 [ 324.331169][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 324.336988][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 324.342277][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 324.347300][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 324.352933][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 324.359001][ T9112] ? ___ratelimit+0x60/0x595 [ 324.363614][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 324.368825][ T9112] oom_kill_process.cold+0x10/0x15 [ 324.373969][ T9112] out_of_memory+0x334/0x1340 [ 324.378675][ T9112] ? lock_downgrade+0x920/0x920 [ 324.383618][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 324.389421][ T9112] ? oom_killer_disable+0x280/0x280 [ 324.394624][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 324.400189][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 324.405305][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 324.410413][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 324.415247][ T9112] try_charge+0xf4b/0x1440 [ 324.419653][ T9112] ? find_held_lock+0x35/0x130 [ 324.424422][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 324.429971][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 324.435514][ T9112] ? find_held_lock+0x35/0x130 [ 324.440277][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 324.445926][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 324.451502][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 324.456698][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 324.462329][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 324.467434][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 324.472797][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 324.478336][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 324.484133][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 324.489356][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 324.494636][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 324.501257][ T9112] ? __kasan_check_read+0x11/0x20 [ 324.506296][ T9112] copy_process+0x3f8/0x6880 [ 324.510982][ T9112] ? __kasan_check_read+0x11/0x20 [ 324.518782][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 324.524147][ T9112] ? __kasan_check_read+0x11/0x20 [ 324.529173][ T9112] ? mark_lock+0xc2/0x1220 [ 324.533583][ T9112] ? __cleanup_sighand+0x60/0x60 [ 324.538501][ T9112] ? find_held_lock+0x35/0x130 [ 324.543619][ T9112] _do_fork+0x146/0xf90 [ 324.547779][ T9112] ? copy_init_mm+0x20/0x20 [ 324.552286][ T9112] ? __kasan_check_read+0x11/0x20 [ 324.557316][ T9112] ? _copy_to_user+0x118/0x160 [ 324.562377][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.568646][ T9112] ? put_timespec64+0xda/0x140 [ 324.573403][ T9112] __x64_sys_clone+0x18d/0x250 [ 324.578174][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 324.583478][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 324.588867][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 324.594040][ T9112] do_syscall_64+0xfa/0x760 [ 324.598549][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.604612][ T9112] RIP: 0033:0x45851a [ 324.608720][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 324.628506][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.637780][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 324.645760][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 324.653718][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 324.661677][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 324.669651][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 324.679861][ T9112] memory: usage 13220kB, limit 0kB, failcnt 164 [ 324.687279][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 324.699199][ T9112] Memory cgroup stats for /syz3: [ 324.699327][ T9112] anon 8990720 [ 324.699327][ T9112] file 36864 [ 324.699327][ T9112] kernel_stack 196608 [ 324.699327][ T9112] slab 3801088 [ 324.699327][ T9112] sock 0 [ 324.699327][ T9112] shmem 0 [ 324.699327][ T9112] file_mapped 0 [ 324.699327][ T9112] file_dirty 0 [ 324.699327][ T9112] file_writeback 0 [ 324.699327][ T9112] anon_thp 6291456 [ 324.699327][ T9112] inactive_anon 249856 [ 324.699327][ T9112] active_anon 9068544 [ 324.699327][ T9112] inactive_file 32768 [ 324.699327][ T9112] active_file 24576 [ 324.699327][ T9112] unevictable 45056 [ 324.699327][ T9112] slab_reclaimable 1216512 [ 324.699327][ T9112] slab_unreclaimable 2584576 [ 324.699327][ T9112] pgfault 19437 [ 324.699327][ T9112] pgmajfault 0 [ 324.699327][ T9112] workingset_refault 0 [ 324.699327][ T9112] workingset_activate 0 [ 324.699327][ T9112] workingset_nodereclaim 0 [ 324.699327][ T9112] pgrefill 503 [ 324.699327][ T9112] pgscan 1031 [ 324.699327][ T9112] pgsteal 565 [ 324.705213][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12657,uid=0 [ 324.812313][ T9112] Memory cgroup out of memory: Killed process 12657 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 324.844662][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 324.856984][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 324.865902][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.875960][ T9112] Call Trace: [ 324.879239][ T9112] dump_stack+0x172/0x1f0 [ 324.883845][ T9112] dump_header+0x177/0x1152 [ 324.888338][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 324.894221][ T9112] ? ___ratelimit+0x2c8/0x595 [ 324.898885][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 324.904677][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 324.909943][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 324.914947][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 324.920563][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 324.926378][ T9112] ? ___ratelimit+0x60/0x595 [ 324.930959][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 324.936062][ T9112] oom_kill_process.cold+0x10/0x15 [ 324.941228][ T9112] out_of_memory+0x334/0x1340 [ 324.946001][ T9112] ? lock_downgrade+0x920/0x920 [ 324.950842][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 324.956681][ T9112] ? oom_killer_disable+0x280/0x280 [ 324.961874][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 324.967409][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 324.972339][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 324.977546][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 324.982444][ T9112] try_charge+0xf4b/0x1440 [ 324.986848][ T9112] ? find_held_lock+0x35/0x130 [ 324.991598][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 324.997121][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 325.002669][ T9112] ? find_held_lock+0x35/0x130 [ 325.007416][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 325.012962][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 325.018498][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 325.023677][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 325.029201][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 325.034306][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 325.039671][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 325.045206][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 325.050920][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 325.056101][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 325.061376][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 325.066378][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.071387][ T9112] copy_process+0x3f8/0x6880 [ 325.075957][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.080960][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 325.085982][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.091008][ T9112] ? mark_lock+0xc2/0x1220 [ 325.095415][ T9112] ? __cleanup_sighand+0x60/0x60 [ 325.100339][ T9112] ? find_held_lock+0x35/0x130 [ 325.105111][ T9112] _do_fork+0x146/0xf90 [ 325.109247][ T9112] ? copy_init_mm+0x20/0x20 [ 325.113731][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.118730][ T9112] ? _copy_to_user+0x118/0x160 [ 325.123495][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.129729][ T9112] ? put_timespec64+0xda/0x140 [ 325.134494][ T9112] __x64_sys_clone+0x18d/0x250 [ 325.139255][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 325.144100][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 325.149384][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 325.154523][ T9112] do_syscall_64+0xfa/0x760 [ 325.159032][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.165000][ T9112] RIP: 0033:0x45851a [ 325.168876][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 325.188662][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 325.197059][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 325.205045][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 325.213006][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 325.220955][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 325.228907][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 325.237721][ T9112] memory: usage 10668kB, limit 0kB, failcnt 170 [ 325.244233][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 325.251650][ T9112] Memory cgroup stats for /syz3: [ 325.251822][ T9112] anon 6791168 [ 325.251822][ T9112] file 36864 [ 325.251822][ T9112] kernel_stack 131072 [ 325.251822][ T9112] slab 3801088 [ 325.251822][ T9112] sock 0 [ 325.251822][ T9112] shmem 0 [ 325.251822][ T9112] file_mapped 0 [ 325.251822][ T9112] file_dirty 0 [ 325.251822][ T9112] file_writeback 0 [ 325.251822][ T9112] anon_thp 6291456 [ 325.251822][ T9112] inactive_anon 249856 [ 325.251822][ T9112] active_anon 6905856 [ 325.251822][ T9112] inactive_file 32768 [ 325.251822][ T9112] active_file 24576 [ 325.251822][ T9112] unevictable 45056 [ 325.251822][ T9112] slab_reclaimable 1216512 [ 325.251822][ T9112] slab_unreclaimable 2584576 [ 325.251822][ T9112] pgfault 19437 [ 325.251822][ T9112] pgmajfault 0 [ 325.251822][ T9112] workingset_refault 0 [ 325.251822][ T9112] workingset_activate 0 [ 325.251822][ T9112] workingset_nodereclaim 0 [ 325.251822][ T9112] pgrefill 536 [ 325.251822][ T9112] pgscan 1065 [ 325.251822][ T9112] pgsteal 565 [ 325.346118][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12721,uid=0 [ 325.362290][ T9112] Memory cgroup out of memory: Killed process 12721 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 325.381534][ T1080] oom_reaper: reaped process 12721 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 325.384044][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 325.407843][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 325.416827][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.427647][ T9112] Call Trace: [ 325.430928][ T9112] dump_stack+0x172/0x1f0 [ 325.435249][ T9112] dump_header+0x177/0x1152 [ 325.439731][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 325.445517][ T9112] ? ___ratelimit+0x2c8/0x595 [ 325.450173][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 325.456106][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 325.461372][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 325.466530][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 325.472166][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 325.477967][ T9112] ? ___ratelimit+0x60/0x595 [ 325.482971][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 325.488098][ T9112] oom_kill_process.cold+0x10/0x15 [ 325.493379][ T9112] out_of_memory+0x334/0x1340 [ 325.498059][ T9112] ? lock_downgrade+0x920/0x920 [ 325.502902][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 325.508729][ T9112] ? oom_killer_disable+0x280/0x280 [ 325.514067][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 325.519950][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 325.524885][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 325.530064][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 325.535038][ T9112] try_charge+0xf4b/0x1440 [ 325.539450][ T9112] ? find_held_lock+0x35/0x130 [ 325.544217][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 325.549756][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 325.555302][ T9112] ? find_held_lock+0x35/0x130 [ 325.560046][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 325.565577][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 325.571102][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 325.576291][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 325.581819][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 325.586913][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 325.592281][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 325.597815][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 325.603511][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 325.608804][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 325.614087][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 325.619091][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.624122][ T9112] copy_process+0x3f8/0x6880 [ 325.628960][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.633965][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 325.638966][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.643978][ T9112] ? mark_lock+0xc2/0x1220 [ 325.648389][ T9112] ? __cleanup_sighand+0x60/0x60 [ 325.653317][ T9112] ? find_held_lock+0x35/0x130 [ 325.658973][ T9112] _do_fork+0x146/0xf90 [ 325.663175][ T9112] ? copy_init_mm+0x20/0x20 [ 325.667692][ T9112] ? __kasan_check_read+0x11/0x20 [ 325.672728][ T9112] ? _copy_to_user+0x118/0x160 [ 325.677737][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.684069][ T9112] ? put_timespec64+0xda/0x140 [ 325.688835][ T9112] __x64_sys_clone+0x18d/0x250 [ 325.694186][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 325.699031][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 325.704299][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 325.709577][ T9112] do_syscall_64+0xfa/0x760 [ 325.714410][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.720304][ T9112] RIP: 0033:0x45851a [ 325.724179][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 325.743877][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 325.752287][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 325.760588][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 325.768550][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 325.776511][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 325.784472][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 325.798371][ T9112] memory: usage 8336kB, limit 0kB, failcnt 177 [ 325.804627][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 325.811627][ T9112] Memory cgroup stats for /syz3: [ 325.811734][ T9112] anon 4562944 [ 325.811734][ T9112] file 36864 [ 325.811734][ T9112] kernel_stack 65536 [ 325.811734][ T9112] slab 3801088 [ 325.811734][ T9112] sock 0 [ 325.811734][ T9112] shmem 0 [ 325.811734][ T9112] file_mapped 0 [ 325.811734][ T9112] file_dirty 0 [ 325.811734][ T9112] file_writeback 0 [ 325.811734][ T9112] anon_thp 4194304 [ 325.811734][ T9112] inactive_anon 249856 [ 325.811734][ T9112] active_anon 4636672 [ 325.811734][ T9112] inactive_file 32768 [ 325.811734][ T9112] active_file 24576 [ 325.811734][ T9112] unevictable 45056 [ 325.811734][ T9112] slab_reclaimable 1216512 [ 325.811734][ T9112] slab_unreclaimable 2584576 [ 325.811734][ T9112] pgfault 19437 [ 325.811734][ T9112] pgmajfault 0 [ 325.811734][ T9112] workingset_refault 0 [ 325.811734][ T9112] workingset_activate 0 [ 325.811734][ T9112] workingset_nodereclaim 0 [ 325.811734][ T9112] pgrefill 536 [ 325.811734][ T9112] pgscan 1065 [ 325.811734][ T9112] pgsteal 565 [ 325.905184][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12687,uid=0 [ 325.920742][ T9112] Memory cgroup out of memory: Killed process 12687 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 325.939581][ T1080] oom_reaper: reaped process 12687 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 325.940332][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 325.963985][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 325.972949][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.983018][ T9112] Call Trace: [ 325.986332][ T9112] dump_stack+0x172/0x1f0 [ 325.990642][ T9112] dump_header+0x177/0x1152 [ 325.995135][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 326.000916][ T9112] ? ___ratelimit+0x2c8/0x595 [ 326.005570][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 326.011363][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.016639][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.021643][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 326.027252][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 326.033136][ T9112] ? ___ratelimit+0x60/0x595 [ 326.037709][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 326.042812][ T9112] oom_kill_process.cold+0x10/0x15 [ 326.047914][ T9112] out_of_memory+0x334/0x1340 [ 326.052571][ T9112] ? lock_downgrade+0x920/0x920 [ 326.057410][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 326.063195][ T9112] ? oom_killer_disable+0x280/0x280 [ 326.068376][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 326.074158][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 326.079086][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 326.084186][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 326.089017][ T9112] try_charge+0xf4b/0x1440 [ 326.094366][ T9112] ? find_held_lock+0x35/0x130 [ 326.099115][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 326.104637][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 326.110275][ T9112] ? find_held_lock+0x35/0x130 [ 326.115033][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 326.120572][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 326.126110][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 326.131300][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 326.136911][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 326.142014][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 326.147377][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 326.152920][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 326.158616][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 326.163810][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.169080][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.174265][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.179379][ T9112] copy_process+0x3f8/0x6880 [ 326.184136][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.189162][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 326.194189][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.199204][ T9112] ? mark_lock+0xc2/0x1220 [ 326.203608][ T9112] ? __cleanup_sighand+0x60/0x60 [ 326.208524][ T9112] ? find_held_lock+0x35/0x130 [ 326.213282][ T9112] _do_fork+0x146/0xf90 [ 326.217429][ T9112] ? copy_init_mm+0x20/0x20 [ 326.221924][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.226937][ T9112] ? _copy_to_user+0x118/0x160 [ 326.231689][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.237908][ T9112] ? put_timespec64+0xda/0x140 [ 326.242654][ T9112] __x64_sys_clone+0x18d/0x250 [ 326.247401][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 326.252241][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.257513][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.263045][ T9112] do_syscall_64+0xfa/0x760 [ 326.267538][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.273405][ T9112] RIP: 0033:0x45851a [ 326.277280][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 326.296889][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 326.305312][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 326.313269][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 326.321219][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 326.329185][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 326.337166][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 326.345474][ T9112] memory: usage 6012kB, limit 0kB, failcnt 183 [ 326.351695][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 326.358530][ T9112] Memory cgroup stats for [ 326.358540][ T9112] /syz3: [ 326.358640][ T9112] anon 2342912 [ 326.358640][ T9112] file 36864 [ 326.358640][ T9112] kernel_stack 65536 [ 326.358640][ T9112] slab 3801088 [ 326.358640][ T9112] sock 0 [ 326.358640][ T9112] shmem 0 [ 326.358640][ T9112] file_mapped 0 [ 326.358640][ T9112] file_dirty 0 [ 326.358640][ T9112] file_writeback 0 [ 326.358640][ T9112] anon_thp 2097152 [ 326.358640][ T9112] inactive_anon 249856 [ 326.358640][ T9112] active_anon 2416640 [ 326.358640][ T9112] inactive_file 32768 [ 326.358640][ T9112] active_file 24576 [ 326.358640][ T9112] unevictable 45056 [ 326.358640][ T9112] slab_reclaimable 1216512 [ 326.358640][ T9112] slab_unreclaimable 2584576 [ 326.358640][ T9112] pgfault 19437 [ 326.358640][ T9112] pgmajfault 0 [ 326.358640][ T9112] workingset_refault 0 [ 326.358640][ T9112] workingset_activate 0 [ 326.358640][ T9112] workingset_nodereclaim 0 [ 326.358640][ T9112] pgrefill 536 [ 326.358640][ T9112] pgscan 1065 [ 326.358640][ T9112] pgsteal 565 [ 326.365906][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12647,uid=0 [ 326.469867][ T9112] Memory cgroup out of memory: Killed process 12647 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 326.489198][ T1080] oom_reaper: reaped process 12647 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 326.489870][ T9112] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 326.512212][ T9112] CPU: 0 PID: 9112 Comm: syz-executor.3 Not tainted 5.4.0-rc5-next-20191029 #0 [ 326.521135][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.531186][ T9112] Call Trace: [ 326.534506][ T9112] dump_stack+0x172/0x1f0 [ 326.538843][ T9112] dump_header+0x177/0x1152 [ 326.543343][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 326.549142][ T9112] ? ___ratelimit+0x2c8/0x595 [ 326.553818][ T9112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 326.559626][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.565171][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.570832][ T9112] ? pagefault_out_of_memory+0x11c/0x11c [ 326.576563][ T9112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 326.582821][ T9112] ? ___ratelimit+0x60/0x595 [ 326.587421][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 326.592542][ T9112] oom_kill_process.cold+0x10/0x15 [ 326.597742][ T9112] out_of_memory+0x334/0x1340 [ 326.602439][ T9112] ? lock_downgrade+0x920/0x920 [ 326.607312][ T9112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 326.613130][ T9112] ? oom_killer_disable+0x280/0x280 [ 326.618342][ T9112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 326.623893][ T9112] ? memcg_stat_show+0xc30/0xc30 [ 326.628846][ T9112] ? do_raw_spin_unlock+0x57/0x270 [ 326.633942][ T9112] ? _raw_spin_unlock+0x28/0x40 [ 326.638803][ T9112] try_charge+0xf4b/0x1440 [ 326.643221][ T9112] ? find_held_lock+0x35/0x130 [ 326.647997][ T9112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 326.653527][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 326.659235][ T9112] ? find_held_lock+0x35/0x130 [ 326.663978][ T9112] ? get_mem_cgroup_from_mm+0x139/0x310 [ 326.669544][ T9112] __memcg_kmem_charge_memcg+0x7c/0x130 [ 326.675089][ T9112] ? memcg_kmem_put_cache+0x50/0x50 [ 326.680269][ T9112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 326.685831][ T9112] __memcg_kmem_charge+0x13a/0x3a0 [ 326.690937][ T9112] __alloc_pages_nodemask+0x4f5/0x910 [ 326.696292][ T9112] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 326.701823][ T9112] ? __alloc_pages_slowpath+0x2920/0x2920 [ 326.707529][ T9112] ? percpu_ref_put_many+0xb1/0x180 [ 326.712706][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.718092][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.723111][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.728124][ T9112] copy_process+0x3f8/0x6880 [ 326.732702][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.737705][ T9112] ? __lock_acquire+0x16f2/0x4a00 [ 326.742834][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.747876][ T9112] ? mark_lock+0xc2/0x1220 [ 326.752286][ T9112] ? __cleanup_sighand+0x60/0x60 [ 326.757206][ T9112] ? find_held_lock+0x35/0x130 [ 326.761965][ T9112] _do_fork+0x146/0xf90 [ 326.766102][ T9112] ? copy_init_mm+0x20/0x20 [ 326.770585][ T9112] ? __kasan_check_read+0x11/0x20 [ 326.775598][ T9112] ? _copy_to_user+0x118/0x160 [ 326.780351][ T9112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.786593][ T9112] ? put_timespec64+0xda/0x140 [ 326.791337][ T9112] __x64_sys_clone+0x18d/0x250 [ 326.796084][ T9112] ? __ia32_sys_vfork+0xc0/0xc0 [ 326.800917][ T9112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 326.806268][ T9112] ? trace_hardirqs_on+0x67/0x240 [ 326.811286][ T9112] do_syscall_64+0xfa/0x760 [ 326.815788][ T9112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.821656][ T9112] RIP: 0033:0x45851a [ 326.825535][ T9112] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 326.845115][ T9112] RSP: 002b:00007ffe1a4920b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 326.853511][ T9112] RAX: ffffffffffffffda RBX: 00007ffe1a4920b0 RCX: 000000000045851a [ 326.861457][ T9112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 326.869414][ T9112] RBP: 00007ffe1a4920f0 R08: 0000000000000001 R09: 00000000019f7940 [ 326.877361][ T9112] R10: 00000000019f7c10 R11: 0000000000000246 R12: 0000000000000001 [ 326.885318][ T9112] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1a492140 [ 326.894765][ T9112] memory: usage 3684kB, limit 0kB, failcnt 189 [ 326.900943][ T9112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 326.907992][ T9112] Memory cgroup stats for /syz3: [ 326.908095][ T9112] anon 118784 [ 326.908095][ T9112] file 36864 [ 326.908095][ T9112] kernel_stack 0 [ 326.908095][ T9112] slab 3801088 [ 326.908095][ T9112] sock 0 [ 326.908095][ T9112] shmem 0 [ 326.908095][ T9112] file_mapped 0 [ 326.908095][ T9112] file_dirty 0 [ 326.908095][ T9112] file_writeback 0 [ 326.908095][ T9112] anon_thp 0 [ 326.908095][ T9112] inactive_anon 249856 [ 326.908095][ T9112] active_anon 192512 [ 326.908095][ T9112] inactive_file 32768 [ 326.908095][ T9112] active_file 24576 [ 326.908095][ T9112] unevictable 45056 [ 326.908095][ T9112] slab_reclaimable 1216512 [ 326.908095][ T9112] slab_unreclaimable 2584576 [ 326.908095][ T9112] pgfault 19437 [ 326.908095][ T9112] pgmajfault 0 [ 326.908095][ T9112] workingset_refault 0 [ 326.908095][ T9112] workingset_activate 0 [ 326.908095][ T9112] workingset_nodereclaim 0 [ 326.908095][ T9112] pgrefill 536 [ 326.908095][ T9112] pgscan 1065 [ 326.908095][ T9112] pgsteal 565 [ 326.908095][ T9112] pgactivate 495 [ 326.913093][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9112,uid=0 [ 326.913195][ T9112] Memory cgroup out of memory: Killed process 9112 (syz-executor.3) total-vm:72452kB, anon-rss:120kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 13:10:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000018c0)}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00meiory '], 0xda00) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@isdn={0x22, 0x3, 0x1f, 0x40, 0x3}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r3, 0x0, 0x0) [ 327.568006][ T21] device bridge_slave_1 left promiscuous mode [ 327.575221][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.657015][ T21] device bridge_slave_0 left promiscuous mode [ 327.663464][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.551643][ T21] device hsr_slave_0 left promiscuous mode [ 329.612409][ T21] device hsr_slave_1 left promiscuous mode [ 329.683237][ T21] team0 (unregistering): Port device team_slave_1 removed [ 329.697017][ T21] team0 (unregistering): Port device team_slave_0 removed [ 329.714993][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.830393][ T21] bond0 (unregistering): Released all slaves [ 337.249133][T13088] IPVS: ftp: loaded support on port[0] = 21 [ 337.260287][T13086] IPVS: ftp: loaded support on port[0] = 21 [ 337.269914][T13055] IPVS: ftp: loaded support on port[0] = 21 [ 337.558473][T13088] chnl_net:caif_netlink_parms(): no params data found [ 337.584215][T13086] chnl_net:caif_netlink_parms(): no params data found [ 337.593020][T13055] chnl_net:caif_netlink_parms(): no params data found [ 337.670413][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.677824][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.685751][T13086] device bridge_slave_0 entered promiscuous mode [ 337.693781][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.700861][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.709309][T13088] device bridge_slave_0 entered promiscuous mode [ 337.724491][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.732159][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.740144][T13086] device bridge_slave_1 entered promiscuous mode [ 337.753340][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.760554][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.768861][T13088] device bridge_slave_1 entered promiscuous mode [ 337.797912][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.805832][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.814634][T13055] device bridge_slave_0 entered promiscuous mode [ 337.829772][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.836974][T13055] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.845567][T13055] device bridge_slave_1 entered promiscuous mode [ 337.867810][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.880541][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.892812][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.917045][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.933236][T13055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.960907][T13055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.973239][T13086] team0: Port device team_slave_0 added [ 337.997544][T13086] team0: Port device team_slave_1 added [ 338.014304][T13088] team0: Port device team_slave_0 added [ 338.029560][T13088] team0: Port device team_slave_1 added [ 338.040171][T13055] team0: Port device team_slave_0 added [ 338.068799][T13055] team0: Port device team_slave_1 added [ 338.114548][T13086] device hsr_slave_0 entered promiscuous mode [ 338.181827][T13086] device hsr_slave_1 entered promiscuous mode [ 338.211170][T13086] debugfs: Directory 'hsr0' with parent '/' already present! [ 338.254749][T13088] device hsr_slave_0 entered promiscuous mode [ 338.311421][T13088] device hsr_slave_1 entered promiscuous mode [ 338.361250][T13088] debugfs: Directory 'hsr0' with parent '/' already present! [ 338.444600][T13055] device hsr_slave_0 entered promiscuous mode [ 338.499922][T13055] device hsr_slave_1 entered promiscuous mode [ 338.541155][T13055] debugfs: Directory 'hsr0' with parent '/' already present! [ 338.910337][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.970146][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.021491][T13055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.028832][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.055919][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.093125][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.130149][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.152595][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.160508][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.254111][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.289646][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.339869][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.347037][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.375316][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.407872][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.441558][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.448668][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.489393][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.521882][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.530351][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.537499][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.574903][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.588770][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.600675][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.607821][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.625628][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.668186][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.681862][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.708471][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.752175][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.779051][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.812212][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.831844][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.866558][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.898690][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.917768][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.929071][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.946415][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.967331][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.982196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.990297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.008626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.020208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.050727][T13055] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.064658][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.078506][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.087586][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.096691][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.110884][T13086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.123109][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.136957][T13088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.153686][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.163099][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.171997][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.181631][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.190067][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.199139][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.207731][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.214963][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.222836][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.231160][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.252228][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.285403][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.294951][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.305302][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.312458][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.322110][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.331350][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.340714][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.349850][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.359795][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.371129][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.379733][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.394709][T13088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.409349][T13055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.430801][T13055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.451500][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.463410][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.472963][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.481926][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.490876][ T3476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.626542][T13055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.323411][T13167] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 341.372849][T13167] CPU: 1 PID: 13167 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 341.382312][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.392476][T13167] Call Trace: [ 341.396669][T13167] dump_stack+0x172/0x1f0 [ 341.401181][T13167] dump_header+0x177/0x1152 [ 341.406042][T13167] ? pagefault_out_of_memory+0x11c/0x11c [ 341.411796][T13167] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 341.417904][T13167] ? ___ratelimit+0x60/0x595 [ 341.422597][T13167] ? do_raw_spin_unlock+0x57/0x270 [ 341.427914][T13167] oom_kill_process.cold+0x10/0x15 [ 341.433262][T13167] out_of_memory+0x334/0x1340 [ 341.439009][T13167] ? __sched_text_start+0x8/0x8 [ 341.443886][T13167] ? oom_killer_disable+0x280/0x280 [ 341.449226][T13167] mem_cgroup_out_of_memory+0x1d8/0x240 [ 341.454801][T13167] ? memcg_stat_show+0xc30/0xc30 [ 341.459769][T13167] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 341.465605][T13167] ? cgroup_file_notify+0x140/0x1b0 [ 341.471321][T13167] memory_max_write+0x262/0x3a0 [ 341.476208][T13167] ? mem_cgroup_write+0x370/0x370 [ 341.481264][T13167] ? lock_acquire+0x20b/0x410 [ 341.486076][T13167] ? retint_kernel+0x2b/0x2b [ 341.490791][T13167] cgroup_file_write+0x241/0x790 [ 341.496133][T13167] ? mem_cgroup_write+0x370/0x370 [ 341.501229][T13167] ? link_css_set+0x550/0x550 [ 341.505947][T13167] ? link_css_set+0x550/0x550 [ 341.510797][T13167] kernfs_fop_write+0x270/0x4a0 [ 341.515782][T13167] __vfs_write+0x8a/0x110 [ 341.520296][T13167] ? kernfs_fop_open+0xd80/0xd80 [ 341.525442][T13167] vfs_write+0x268/0x5d0 [ 341.530649][T13167] ksys_write+0x14f/0x290 [ 341.535008][T13167] ? __ia32_sys_read+0xb0/0xb0 [ 341.539801][T13167] ? do_syscall_64+0x26/0x760 [ 341.544522][T13167] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.550721][T13167] ? do_syscall_64+0x26/0x760 [ 341.555519][T13167] __x64_sys_write+0x73/0xb0 [ 341.560314][T13167] do_syscall_64+0xfa/0x760 [ 341.565073][T13167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.571102][T13167] RIP: 0033:0x459f49 [ 341.575014][T13167] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.595394][T13167] RSP: 002b:00007f16b8cddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.603831][T13167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 341.611831][T13167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 341.620046][T13167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 341.628050][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16b8cde6d4 [ 341.636060][T13167] R13: 00000000004ca630 R14: 00000000004e27a8 R15: 00000000ffffffff [ 341.751191][T13167] memory: usage 5884kB, limit 0kB, failcnt 58 [ 341.757881][T13167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 341.822918][T13167] Memory cgroup stats for /syz1: [ 341.824074][T13167] anon 4358144 [ 341.824074][T13167] file 151552 [ 341.824074][T13167] kernel_stack 65536 [ 341.824074][T13167] slab 1622016 [ 341.824074][T13167] sock 0 [ 341.824074][T13167] shmem 212992 [ 341.824074][T13167] file_mapped 0 [ 341.824074][T13167] file_dirty 0 [ 341.824074][T13167] file_writeback 0 [ 341.824074][T13167] anon_thp 4194304 [ 341.824074][T13167] inactive_anon 176128 [ 341.824074][T13167] active_anon 4358144 [ 341.824074][T13167] inactive_file 135168 [ 341.824074][T13167] active_file 0 [ 341.824074][T13167] unevictable 0 [ 341.824074][T13167] slab_reclaimable 540672 [ 341.824074][T13167] slab_unreclaimable 1081344 [ 341.824074][T13167] pgfault 24783 [ 341.824074][T13167] pgmajfault 0 [ 341.824074][T13167] workingset_refault 0 [ 341.824074][T13167] workingset_activate 0 [ 341.824074][T13167] workingset_nodereclaim 0 [ 341.824074][T13167] pgrefill 0 [ 341.824074][T13167] pgscan 0 [ 341.824074][T13167] pgsteal 0 [ 341.824074][T13167] pgactivate 0 [ 342.419778][T13167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13166,uid=0 [ 342.557327][T13167] Memory cgroup out of memory: Killed process 13166 (syz-executor.1) total-vm:72588kB, anon-rss:4236kB, file-rss:35940kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 342.620950][ T1080] oom_reaper: reaped process 13166 (syz-executor.1), now anon-rss:0kB, file-rss:34984kB, shmem-rss:0kB 13:11:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 343.896442][T13055] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 343.928694][T13055] CPU: 0 PID: 13055 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 343.938419][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.948524][T13055] Call Trace: [ 343.951852][T13055] dump_stack+0x172/0x1f0 [ 343.956210][T13055] dump_header+0x177/0x1152 [ 343.960866][T13055] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 343.966702][T13055] ? ___ratelimit+0x2c8/0x595 [ 343.971573][T13055] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 343.977574][T13055] ? lockdep_hardirqs_on+0x421/0x5e0 [ 343.983085][T13055] ? trace_hardirqs_on+0x67/0x240 [ 343.988141][T13055] ? pagefault_out_of_memory+0x11c/0x11c [ 343.993802][T13055] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 343.999718][T13055] ? ___ratelimit+0x60/0x595 [ 344.004327][T13055] ? do_raw_spin_unlock+0x57/0x270 [ 344.009601][T13055] oom_kill_process.cold+0x10/0x15 [ 344.014735][T13055] out_of_memory+0x334/0x1340 [ 344.019675][T13055] ? lock_downgrade+0x920/0x920 [ 344.024737][T13055] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 344.031100][T13055] ? oom_killer_disable+0x280/0x280 [ 344.037113][T13055] mem_cgroup_out_of_memory+0x1d8/0x240 [ 344.042855][T13055] ? memcg_stat_show+0xc30/0xc30 [ 344.048607][T13055] ? do_raw_spin_unlock+0x57/0x270 [ 344.053929][T13055] ? _raw_spin_unlock+0x28/0x40 [ 344.058818][T13055] try_charge+0xf4b/0x1440 [ 344.063272][T13055] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 344.068843][T13055] ? percpu_ref_tryget_live+0x10c/0x290 [ 344.074625][T13055] ? rcu_read_lock_held+0x9c/0xb0 [ 344.079674][T13055] ? __kasan_check_read+0x11/0x20 [ 344.084807][T13055] ? get_mem_cgroup_from_mm+0x151/0x310 [ 344.090372][T13055] mem_cgroup_try_charge+0x136/0x590 [ 344.095873][T13055] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 344.101780][T13055] wp_page_copy+0x407/0x1860 [ 344.106397][T13055] ? find_held_lock+0x35/0x130 [ 344.111190][T13055] ? pmd_devmap_trans_unstable+0x220/0x220 [ 344.117260][T13055] ? lock_downgrade+0x920/0x920 [ 344.122154][T13055] ? swp_swapcount+0x540/0x540 [ 344.127033][T13055] ? __kasan_check_read+0x11/0x20 [ 344.132329][T13055] ? do_raw_spin_unlock+0x57/0x270 [ 344.137672][T13055] do_wp_page+0x543/0x1540 [ 344.142384][T13055] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 344.147806][T13055] __handle_mm_fault+0x23a9/0x3fd0 [ 344.152950][T13055] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 344.158527][T13055] ? handle_mm_fault+0x292/0xa90 [ 344.163638][T13055] ? handle_mm_fault+0x7dd/0xa90 [ 344.168590][T13055] ? __kasan_check_read+0x11/0x20 [ 344.173808][T13055] handle_mm_fault+0x3b2/0xa90 [ 344.178590][T13055] __do_page_fault+0x536/0xdd0 [ 344.183390][T13055] do_page_fault+0x38/0x590 [ 344.188262][T13055] page_fault+0x39/0x40 [ 344.192928][T13055] RIP: 0033:0x431026 [ 344.196853][T13055] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 bc 5c 64 00 85 c0 0f 84 [ 344.217232][T13055] RSP: 002b:00007ffc22bdf1d0 EFLAGS: 00010206 [ 344.223449][T13055] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 344.232803][T13055] RDX: 0000000001aed930 RSI: 0000000001af5970 RDI: 0000000000000003 [ 344.240866][T13055] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001aec940 [ 344.249294][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 344.257450][T13055] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 344.281254][T13055] memory: usage 1496kB, limit 0kB, failcnt 66 [ 344.287744][T13055] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.311070][T13055] Memory cgroup stats for /syz1: [ 344.311238][T13055] anon 94208 [ 344.311238][T13055] file 151552 [ 344.311238][T13055] kernel_stack 0 [ 344.311238][T13055] slab 1622016 [ 344.311238][T13055] sock 0 [ 344.311238][T13055] shmem 212992 [ 344.311238][T13055] file_mapped 0 [ 344.311238][T13055] file_dirty 0 [ 344.311238][T13055] file_writeback 0 [ 344.311238][T13055] anon_thp 0 [ 344.311238][T13055] inactive_anon 176128 [ 344.311238][T13055] active_anon 94208 [ 344.311238][T13055] inactive_file 135168 [ 344.311238][T13055] active_file 0 [ 344.311238][T13055] unevictable 0 [ 344.311238][T13055] slab_reclaimable 540672 [ 344.311238][T13055] slab_unreclaimable 1081344 [ 344.311238][T13055] pgfault 24816 [ 344.311238][T13055] pgmajfault 0 [ 344.311238][T13055] workingset_refault 0 [ 344.311238][T13055] workingset_activate 0 [ 344.311238][T13055] workingset_nodereclaim 0 [ 344.311238][T13055] pgrefill 0 [ 344.311238][T13055] pgscan 0 [ 344.311238][T13055] pgsteal 0 [ 344.311238][T13055] pgactivate 0 [ 344.409739][T13055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13055,uid=0 [ 344.425915][T13055] Memory cgroup out of memory: Killed process 13055 (syz-executor.1) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 344.445678][ T1080] oom_reaper: reaped process 13055 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 352.668227][ T21] device bridge_slave_1 left promiscuous mode [ 352.674622][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.732643][ T21] device bridge_slave_0 left promiscuous mode [ 352.740155][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.794009][ T21] device bridge_slave_1 left promiscuous mode [ 352.800497][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.852694][ T21] device bridge_slave_0 left promiscuous mode [ 352.859448][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.895853][ T21] device bridge_slave_1 left promiscuous mode [ 352.902536][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.942530][ T21] device bridge_slave_0 left promiscuous mode [ 352.948745][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.591533][ T21] device hsr_slave_0 left promiscuous mode [ 358.681424][ T21] device hsr_slave_1 left promiscuous mode [ 358.760081][ T21] team0 (unregistering): Port device team_slave_1 removed [ 358.774634][ T21] team0 (unregistering): Port device team_slave_0 removed [ 358.785576][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.828160][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.930692][ T21] bond0 (unregistering): Released all slaves [ 359.152260][ T21] device hsr_slave_0 left promiscuous mode [ 359.211332][ T21] device hsr_slave_1 left promiscuous mode [ 359.265632][ T21] team0 (unregistering): Port device team_slave_1 removed [ 359.280617][ T21] team0 (unregistering): Port device team_slave_0 removed [ 359.293987][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.327357][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.487864][ T21] bond0 (unregistering): Released all slaves [ 359.801614][ T21] device hsr_slave_0 left promiscuous mode [ 359.861322][ T21] device hsr_slave_1 left promiscuous mode [ 359.913628][ T21] team0 (unregistering): Port device team_slave_1 removed [ 359.926138][ T21] team0 (unregistering): Port device team_slave_0 removed [ 359.938507][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.979511][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.127834][ T21] bond0 (unregistering): Released all slaves 13:11:28 executing program 0: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:11:28 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="cd3997030f02", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x8, 0x2f, 0x0, @local, @mcast2, {[], @icmpv6=@echo_reply}}}}}, 0x0) 13:11:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) 13:11:28 executing program 5: syz_mount_image$hfs(&(0x7f0000000380)='hfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={[{@type={'type', 0x3d, "2f9ab781"}}]}) 13:11:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 369.846180][T13210] hfs: can't find a HFS filesystem on dev loop5 [ 369.916744][T13210] hfs: can't find a HFS filesystem on dev loop5 13:11:31 executing program 2: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:11:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 13:11:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x2a}, 0x2}, 0x0) 13:11:31 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000580)="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", 0xfc) 13:11:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 13:11:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRES16], 0x2) splice(r0, 0x0, r3, 0x0, 0xec6, 0x0) 13:11:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 384.760015][T13220] IPVS: ftp: loaded support on port[0] = 21 [ 384.760021][T13224] IPVS: ftp: loaded support on port[0] = 21 [ 384.774898][T13223] IPVS: ftp: loaded support on port[0] = 21 [ 384.788857][T13246] IPVS: ftp: loaded support on port[0] = 21 [ 385.211338][T13220] chnl_net:caif_netlink_parms(): no params data found [ 385.232982][T13223] chnl_net:caif_netlink_parms(): no params data found [ 385.254011][T13224] chnl_net:caif_netlink_parms(): no params data found [ 385.279535][T13246] chnl_net:caif_netlink_parms(): no params data found [ 385.346118][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.353688][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.362254][T13223] device bridge_slave_0 entered promiscuous mode [ 385.382714][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.389811][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.398177][T13224] device bridge_slave_0 entered promiscuous mode [ 385.419725][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.429101][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.440205][T13223] device bridge_slave_1 entered promiscuous mode [ 385.455191][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.462937][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.470816][T13224] device bridge_slave_1 entered promiscuous mode [ 385.478101][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.485343][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.493609][T13220] device bridge_slave_0 entered promiscuous mode [ 385.531845][T13220] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.538934][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.555480][T13220] device bridge_slave_1 entered promiscuous mode [ 385.563151][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.570206][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.579161][T13246] device bridge_slave_0 entered promiscuous mode [ 385.588789][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.610427][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.618968][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.627692][T13246] device bridge_slave_1 entered promiscuous mode [ 385.641714][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.670281][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.767654][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.779163][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.790240][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.808940][T13223] team0: Port device team_slave_0 added [ 385.829572][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.840505][T13223] team0: Port device team_slave_1 added [ 385.862899][T13220] team0: Port device team_slave_0 added [ 385.870264][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.890441][T13224] team0: Port device team_slave_0 added [ 385.899091][T13220] team0: Port device team_slave_1 added [ 385.927489][T13224] team0: Port device team_slave_1 added [ 385.945871][T13246] team0: Port device team_slave_0 added [ 386.023638][T13223] device hsr_slave_0 entered promiscuous mode [ 386.071598][T13223] device hsr_slave_1 entered promiscuous mode [ 386.111419][T13223] debugfs: Directory 'hsr0' with parent '/' already present! [ 386.201598][T13246] team0: Port device team_slave_1 added [ 386.263393][T13224] device hsr_slave_0 entered promiscuous mode [ 386.321517][T13224] device hsr_slave_1 entered promiscuous mode [ 386.376837][T13224] debugfs: Directory 'hsr0' with parent '/' already present! [ 386.434385][T13220] device hsr_slave_0 entered promiscuous mode [ 386.471732][T13220] device hsr_slave_1 entered promiscuous mode [ 386.521384][T13220] debugfs: Directory 'hsr0' with parent '/' already present! [ 386.686057][T13246] device hsr_slave_0 entered promiscuous mode [ 386.731802][T13246] device hsr_slave_1 entered promiscuous mode [ 386.771238][T13246] debugfs: Directory 'hsr0' with parent '/' already present! [ 387.005991][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.035280][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.062039][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.177902][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.187126][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.195776][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.203971][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.219799][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.233969][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.247012][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.260001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.268658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.277227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.286493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.297588][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.304736][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.312828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.336513][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.350522][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.362221][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.369285][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.377580][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.389509][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.398453][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.405576][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.415129][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.424046][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.432702][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.439749][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.447807][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.456548][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.468573][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.477441][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.485965][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.493180][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.502177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.510271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.617689][T13220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.628612][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.638780][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.647984][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.657686][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.667879][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.677935][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.686623][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.695607][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.704576][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.713671][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.722865][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.732213][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.740455][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.749659][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.758280][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.765406][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.796533][T13224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.807597][T13224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.820395][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.833724][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.842394][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.850764][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.860112][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.868592][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.877112][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.886189][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.894976][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.902883][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.911426][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.927586][T13220] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.028138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.036789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.045646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.054508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.063412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.072394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.080894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.091656][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.114789][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.138541][T13246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.159618][T13246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.172752][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.185685][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.195617][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.202868][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.211228][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.219805][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.228259][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.235533][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.243331][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.251900][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.260441][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.269132][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.277756][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.286797][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.295474][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.313813][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.429719][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.438914][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.448674][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.465944][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.477507][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.489867][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.499501][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.508441][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.517139][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.567937][T13220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.636822][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.656425][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.692392][ T21] device bridge_slave_1 left promiscuous mode [ 388.699391][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.753133][ T21] device bridge_slave_0 left promiscuous mode [ 388.759401][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.891689][ T21] device hsr_slave_0 left promiscuous mode [ 390.940657][ T21] device hsr_slave_1 left promiscuous mode [ 391.006687][ T21] team0 (unregistering): Port device team_slave_1 removed [ 391.019758][ T21] team0 (unregistering): Port device team_slave_0 removed [ 391.034600][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.085989][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.198480][ T21] bond0 (unregistering): Released all slaves [ 391.372786][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.222280][ T21] device bridge_slave_1 left promiscuous mode [ 403.228594][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.253761][ T21] device bridge_slave_0 left promiscuous mode [ 403.259976][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.272116][ T21] device hsr_slave_0 left promiscuous mode [ 405.331465][ T21] device hsr_slave_1 left promiscuous mode [ 405.401463][ T21] team0 (unregistering): Port device team_slave_1 removed [ 405.416353][ T21] team0 (unregistering): Port device team_slave_0 removed [ 405.427932][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.475995][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.607115][ T21] bond0 (unregistering): Released all slaves 13:12:11 executing program 0: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) 13:12:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x3d}}) 13:12:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) 13:12:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) 13:12:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000100003164c99fbdfa9bd61000000ff3f0300000b140384c6fccfdd1419001a0015000a00050008000000000000005d14a4e91ee438", 0x39}], 0x1) 13:12:11 executing program 2: dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x26f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pipe2$9p(0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r3, 0x0, 0x0) [ 412.584190][T13332] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 13:12:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) 13:12:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r4}, 0xc) 13:12:11 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/version\x00Z\xa2\xac\x00\x00\xb8\xb5\xa2\x8a)\xae\xcb\xf8C8ZQ%\x03\x98\xce\x12\xd9\x84\xf5*\x14\x9e\xaf\x98f\xf3\xc38(\xfes\xd4\xf3\x19R\x8b\xbd\x89\xfc\xef\xb6%\xad\xacF\xdfu\"\xeb\xb2<\x98\xadi\xbd\xc8%\t\xdfoCy\x17\x02\x00\x00\x00\xca\x02\x98\x89\x05\xb6r\xc3\xa2\r\x10\xf8\x90\xb9\xf5w$4\v8N\xcaa6\xea\xe4\xfdJ\x01^\a0v\xb8\xf1\xcd\xe4^\xea\x0f\x0f\f<\xa6N\xbd\xd0\xce\xfc\r\x9e\x8e\xa9\x1d\v\xbb\xa5\x00'/160, 0x2, 0x0) lseek(r0, 0xa, 0x0) 13:12:11 executing program 1: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x2}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x14, &(0x7f00000000c0)={r2}, 0x8) 13:12:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:11 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe02080100010800080003000400ff7e", 0x24}], 0x1}, 0x0) [ 417.492051][ T21] device bridge_slave_1 left promiscuous mode [ 417.498526][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.552316][ T21] device bridge_slave_0 left promiscuous mode [ 417.558790][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.441660][ T21] device hsr_slave_0 left promiscuous mode [ 419.491411][ T21] device hsr_slave_1 left promiscuous mode [ 419.543494][ T21] team0 (unregistering): Port device team_slave_1 removed [ 419.558705][ T21] team0 (unregistering): Port device team_slave_0 removed [ 419.571270][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.625980][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.761450][ T21] bond0 (unregistering): Released all slaves 13:12:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1}, 0x0) shutdown(r0, 0x2) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0) 13:12:25 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_team\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 13:12:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) 13:12:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x9}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x49249249249252d, 0x0) [ 426.745584][T13419] IPVS: ftp: loaded support on port[0] = 21 [ 426.766969][T13420] IPVS: ftp: loaded support on port[0] = 21 [ 426.947434][T13435] IPVS: ftp: loaded support on port[0] = 21 [ 427.044877][T13418] IPVS: ftp: loaded support on port[0] = 21 13:12:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:26 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff0cfffefd956fa283b7549c911e00000000000000683540150024002e0034c8c249ae5f9e820f44acdf66672825c4110bee46", 0x39}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300094700bb65e1c3e4ffff06000000020000004500000025000000190029", 0x23}], 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:12:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 427.522072][T13448] IPVS: ftp: loaded support on port[0] = 21 [ 427.558522][T13446] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 427.638126][T13455] IPVS: ftp: loaded support on port[0] = 21 13:12:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="d4689b81dc4c8fbaf81ebcb0cee9e0a4204fcb2e48a2c8fe1df07cb15917ffe1b5645c2c0f8a67baefc4ca78c5c587aabe727f28c863d47b2086b73bd72d9833f0d8996534728df4d6d59a0971a037b6d7eb9f02495cc1afbcc318f7d39b81c365854172378567ed4664771984b045457ede84300f17e4859ee4b098c854347347efee9ac08dec8a7d431f823ab3eb3d136af1d558e3a5734cfb689f5aceaea982badd0c4488ad3332836ff403844002444aedce91408f3c35e364dc61c3ee3dd850729614068f6e0451fde8dcbd024345ba2259ff0f50c53b7fc3f60c468dcbcd1f69ea0945db3503318f3316733bdaf1314ccc501fc00b2536357c6bb8764be734337457177cb932e940ee9a2b26518b847b9eeace042ba0e8ec9580253fea72893c60b0de94eea700c0516a07b725d25d202c55624f9db0a6a3f2fd7deb8e4e7b55e1dcc7e959df11a44172cfcf7b65386cb6e0f668c96970eaf6fe0aca8534a603ad7a2a1a41fb41a5620e08448fcd3d97de16ce8e1a1162498764a4d050404dc0089c5c9d1bc08f0a68248a86afcb06325ee89fa4da5374f67011617690427aac4a0ea976646e0ae3744e882f0592a380e52db6c04272f75fa2da4c31ccee17fba42860485f91b06b78c14455e1b0f3a17095e76cd7d7fe9359384b40904b84a9ee9c61688c90c3116bed65d890632a0d01607594a9086d64b7c54af9ac1c90f1429e6f317f65d887f232510cc07b3ef3d3b27eaba0937042f07fda9e7cef04c0258cb97aa564b8f1b2fd4712fe5d8a5c53342f65cb3dbcc47534a0d8a5228094c45b1dfed1d855707058e3c3628fa3902eab783e36983a793ed221dda4e300ba48036fb160e82521b9e0dfafebd400d54b4f4229383177f2ff7a0ee9f9f32969a7687e887ddfdcda0e4deb4f8fc2bf76886b70d8bea277cbe196bdbd7788656b67d176937bafed7d681049174e7be17df6a7cf5833278702b710d04c948bd315b76b95a307a7ea10e4532092b0ab73470abb0de6e744424933cdf5b79cd09e8e62fe8172ea1af780cd0c248853fb3d5901d141d4b487f8626b3a9c0f5a4b4137518a0da8c62c7761683b064d3ef7095f83822dab6662cab5e8b6208fe411edd407d941ecb0f191581fae811de336115ec034dd7eb62528affef88a13e01ec77566990f6469fdcdefdae9707bcad76f4ce4e41b2823080ed1dc29ce2eab97c217e74627327020d8291369f87368285f9fa517079b5149d5bba1de20ca217511608629e430d039f2c95d063134bc571355be09b81b392383ced88c38799d0a18a0524f54cab7cf47b93eb0663823b0f41c4b5d3a40fdec9ae47c73dace4cf47e8ef720c1115374cde910bf545f19d123b22c86f9afb569f07274892470d2fd6b7be4675929a7774eaa6ebd54a583a302fd7601a25bc65f1167922f82b4cbcea78868aa48a643bf6b6db1f469a1a1fecb2764074b501bbe8c1a3bb56dd23c55f3ad87e4cb8d3d17cd42762c0b0140d8b25e69ef4619c3ae85ea916aee126968e000fa219c690f7936949c63d11b770a2bc9d5db2db96cd66184b525e21c975ac9b1ea53159a8dfb8f00032e358faaea8a96c965f1c8c6e162c9a9ed0874626ce9842c5f92adff0a3a87b8e8f11e28acd16595b58faf6e8cfd67fdfedfd6573cebd8b1db0889f48e94f326bb509a09419a474bcb8d8b62f248868b608d0a1c236a3c1fbb0e9a28220d53c55b22c5a34ccacade3a49fa42cb67cd631ea94d52433bca1baa0e768e9144ffbf60d8b3329273f3e7553f17cb1f4330402b7bcc2de80e6acfed941d0bb4dc7a77db47d02fad4b9d2f37037bcecbc1227d8140fe2c74148292f9ab52f705cf716e5b481d7daf9dfd6994cbb3d17f6101106ce4a8d1df67145ceb623134bb2f52f6b5f3410da7c1e2d13bf651f108dba2ce39732c66b8417d54e384f4e5e438c9c0bb732114a0b94c3418ff7cfd57b178b724be1aa098bf92700b51a1b9573a81772b0bebab74caa9b90add48d227ba398043fcd13cef2138fea519f8ac3b7cd8516d79a9adc689d0bccd042b910260711df5eafc32cc58828d73fefeab3b1c5cf083d3f6337bc31054265660e4fddeae32e525443ab5ac50f3c36b19333594c4d4945266a56699fad4d3c6489a125f1d8bf7da76bd4a32c6423c1ff7e613d881e1a6649e7c21045ac7092d910aa59858ee52aa93c5ae3c43bdf14856f09cb5d2e2d1e05ad0502740088ca960bce87743fa92cc1a1ae82a8165c2bd722a2029cfbf6511674bd4dcde16ff4628904622c182786abf0fb42f2a8c1ae13a115c758c9738da142a31e0a6859f339fb272fe747f2d8eaf76074e403100a63c94cb9a27a5c225fef353f62982b72515503f41cbec653d74538b75c5cb5673edc109bc579d525e73dc68b9f7142c5e86ce0dc031fe338a110376787424d16791272003639f528494e6bc6222e87e3bc4df0e04c549f8f836631c00ef6fe6d3566b1e85979723044df10c1a42058272d9a6319c91c3b36ba9a3913e4ad6dc5dbad72e0586d8dc92e3b758917e91d0c782e92f9a63e26eb181c2e75e2415d6a456b417f95eb410184edf8f781b7d07eb8b21576918f08c1f339e0b1a42eb170238f201e736a4d345fead8edc12d6a5da89916d506afb3a313e4f593eaccbaa1d51dc6dc09a9dc949996c5b525e619096b005d37ff20ed83607893eb372a030f12ba581e36dcfc74a0c5e1305b8d4fcb377bcf5ccaa94896af7dd5a675314e5e859d080913881dfa74b1c156e4600c1a865f59dac8a90107ec42c1ee50dda9820446a07d780ec71549eb2bcc3ac8c244e65e9d899ba875e6d242da64fd22e3a20f51b1a8f7cf155e4a3ab2ec6b9f94d2ea67e255806da93f5413d134519e71f7b1e152209eefe3d5c19702c61fb17da07eebc389f237cc2d8c4af0fdb1ff290cf73be058b8ae7b565e4fc85f7b24a6c37885393c52b43d95453038ce06bdee9211fc0b61c3ead43f2c49a3705ee16b1609c4a511e732e7e490349df541f4ef69cc19c6aee31105fd9ad6054b306b5f83c27f775c5aeed475d0e47a89e1050aae7864cbaa561c4ee320657b07fbcff4a91ae141cc5deff9ce265f489956b7b926fdd98e5c58b10a5f0b5cbba387e535b0d789ff34114b1ec9eb7004b3ffb61e2fbb9c26a2a43c36b24a8f60cc56aad0e38d3b7697b57ae7b20cba600fdf4ad3260e23083003e7cad5c607823cfd289535071345de67ce22eca382f20f391106d3af0af3a7cf5583806d2a9f70a594545a54a2cd5540721884e6090e8a186cc7f6b2e0fc09b3f760057bf811232c39e2e54ae82c3cbd582dfecc801fd7566991ec2a3a7d92a5d4f4827465f1ecee6ee50c2c8505d47dff219ed9655d982dbcb736c37cb50d8f750c062005cdb5ee6ef167986f037ced1a0c2e09c95be78c9dd594ef13ef0d379bf05963d9ebfc31c173b3509deb6d395ede322d01272f36ad3018283affc536ab2459a8ff3d19b6c10551b014ae94fc0c641e4400f0a66032970adeae55f8edfdefa850a1252aaa18bf792018c415c381bfa72ade7aa7f659b9e3add559ad64b1ef8877fdfabb9d2f160aa1cd8fd2e94c7e7a43abbdf77e4b772ac20f1c695675b897ae64e9e67f352b8d32f8d5bc50d05d6fd33f18e04e4f1668a1051045640797627001d54952daa1ae55407a87a239de3258465d1e560fdbe2370c9123fbc2b668397f6c7b76fb3c8c540c8ffdf04f044896459a438b6056a6ed7ea594b451c4e325dc2b7d499b5d26129706a7354ba2884121037fa5076be8a378c7cc1b58605a6dd228c71c33515e1a285041c175314589ac97e2ba105395af6bffaf480d9e0a8bc081760091c349ecdd5cd6f81e8fb48e46e47f0ea62ac16b86b391b6020a0ef4595c2111cfc6698a45fab0e7b263b08cdb3b162fa4b727ddfbc32a320274e01ca5e66667eaf2d4d4efa1b79d5e7005d7c0874173464603e43029d883e3ab89d70f5f35eca3fc5ea4b1433db4653fa417a318e99c8d64e729599b79f88782a7ff33fb6f9b1f32a394179cc5b04bc9942cd011a4842600bfc16d807e6f7d1f9449da835a36fb44d3058cdaf8e21ebf59fb3b8e958c7dcedb8747b45f4383df717325b64fe7dfbabb49bad3e616dce6bafc246643ea019210171e90ba9e95511e8062443fa987eca6d0cfa5752439573cda8da97f20be2f7b8887caf626b5f7a5ab8b898651af2c801ab5406dae699c776fe958af22b7c886c691eaec4bf424afca4bfcd2de001db3307ef3a0abb22003c84040d8cee754b57d7953325cd80bd78a78d77ce7a36817b5c958fc89104491f133d51d13a8032b0fc4a4e852b1b818f514da4e1278a8061882c525e4f7f1ff8ac7b5bf7873becafd0aba212b940d90554ccdc2f24bf684fffd6f6efbb82ebd8669dbf1b94502d088edc501779fd43182179baec39a20b28d513069caedf7634ff7d20195be1606e211f6316e9ab65dbed511fddab80b01d45d04052fa0e3a2a08c16049f0e386bc069f047fdae4f56bcc16db92e8bbfe76091a632f46cd7b964ed709a3f857a23a361e3a147daa190ac46f9206a6d3a73880875cb452b0e8dfb35df04e6b8561a0ec049f4cf735cc2539b56a24a8fedeb1dcd391037ee8c75d0ddcba1da49f8b12bf84b0f091c1c9de5e1076d1c10357eddcdbb24a79e1d9574226b919d4b391773b578a10a171ac06272a9e5aed6e1f0086cabad06e276466fe983d8f43d4a038cdc247b27eef6e648d6f8c78f3edd3910f7cba1e39f449a7b8062ed77b973d480b317917170983b636cd043dcbc29d7b02aa5526fe7a5bbf219690ee519ae04f2a729c44d6667ce629f2dcea5820ccac8354faa96ae4ede00d7beae7b3f9f245b7fd70c9ca248e2d6abeba123c1a1dc736d2fa083c7426c26ce75f1ef2f4b8154e10015b013f11193f847b78584687fa08e5ac5bff7349cdc3adc759e3948b1cb4c67c94f14ac71a3b185b6e4a1739fc4d2b660d1a62e58f6b9df40a3ec900509ae87d7b5990d1cd8150d7539b6e0c980d16d7f485058f71b9f60381b4b9bbe06a8c3e1daaf33c910fda8bd40b9db4"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 430.418193][T13478] IPVS: ftp: loaded support on port[0] = 21 [ 430.462257][T13481] IPVS: ftp: loaded support on port[0] = 21 [ 430.462716][T13479] IPVS: ftp: loaded support on port[0] = 21 [ 430.568892][T13469] IPVS: ftp: loaded support on port[0] = 21 13:12:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13:12:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'eql\x00', @ifru_flags}) 13:12:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff}], "", [[], []]}, 0x278) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getpid() chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 431.218047][T13499] IPVS: ftp: loaded support on port[0] = 21 13:12:30 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) 13:12:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:12:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe15, 0x0, &(0x7f0000000600)="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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@default, @null, @remote, @null, @null, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x6, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x20000000}]}, 0x18, 0x3) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 431.770282][T13508] IPVS: ftp: loaded support on port[0] = 21 13:12:30 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) 13:12:30 executing program 0: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f610529802000001f040005000008000800030002000000", 0x24}], 0x1}, 0x0) [ 432.389509][T13223] debugfs: Directory 'loop0' with parent 'block' already present! 13:12:32 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) 13:12:32 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x0, 0x20000513c3326, 0x0, 0x0, 0x2, [{}, {}]}) 13:12:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "e78b05d6068f45168f4e782f8bcf5bb71c744619b6ab40242035ce9a8cf491cb", "2c578a56bfca6b6aca367f82150a3555d6562c2fd76b48663f5ef6e4f1277358", "a23c66e58134ddc29ffca4ecb1c8243b327765c90eb3115c79f555e3297dc47e", "e33da682a8d2d389ff6ff9f08722604696328b23114dda3bf22ac1e1aac7c1db", "ee875d7a9bcb2016829922c4dd5681d96cc9ee9a00d4cbf7a6f58d94c4564800", "0d338c822865ba2487476b73"}}) 13:12:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x7}}}, 0x0, 0x8, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac500001f0397a5f406473879b8171ae0d09086cb18d602ee628a5531290242710b99b8401772c02989f80629dc1d9e00"}, 0x191) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000414900000004fcff", 0x58}], 0x1) 13:12:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:12:32 executing program 5: r0 = timerfd_create(0x0, 0x0) fstat(r0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b2b, &(0x7f0000000000)='wlan0\x00') 13:12:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) [ 434.261517][ T26] audit: type=1804 audit(1572354753.014:49): pid=13550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/14/file0" dev="sda1" ino=16924 res=1 13:12:33 executing program 1: clock_adjtime(0x0, &(0x7f0000000140)={0xff, 0x0, 0x0, 0x0, 0x0, 0x80000000003ff, 0x2000}) 13:12:33 executing program 3: setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000080)='[', 0x1, 0x1000000000000000) 13:12:33 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)) [ 434.428346][ T26] audit: type=1804 audit(1572354753.014:50): pid=13550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/14/file0" dev="sda1" ino=16924 res=1 13:12:33 executing program 1: clock_adjtime(0x0, &(0x7f0000000140)={0xff, 0x0, 0x0, 0x0, 0x0, 0x80000000003ff, 0x2000}) 13:12:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 13:12:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_FWMARK={0x8, 0xb}]]}}}]}, 0x48}}, 0x0) [ 434.843973][T13577] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 435.047634][ T26] audit: type=1804 audit(1572354753.794:51): pid=13550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/14/file0" dev="sda1" ino=16924 res=1 13:12:33 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x0, 0x20000513c3326, 0x0, 0x0, 0x2, [{}, {}]}) 13:12:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x19, 0x4, 0x4000000004, 0x200001094, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e]}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 13:12:33 executing program 1: clock_adjtime(0x0, &(0x7f0000000140)={0xff, 0x0, 0x0, 0x0, 0x0, 0x80000000003ff, 0x2000}) 13:12:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@uni_xlate='uni_xlate=1'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:12:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:12:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045440, 0x70f000) [ 435.189513][T13596] FAT-fs (loop2): bogus number of reserved sectors [ 435.211147][T13596] FAT-fs (loop2): Can't find a valid FAT filesystem 13:12:34 executing program 1: clock_adjtime(0x0, &(0x7f0000000140)={0xff, 0x0, 0x0, 0x0, 0x0, 0x80000000003ff, 0x2000}) [ 435.303300][T13596] FAT-fs (loop2): bogus number of reserved sectors [ 435.334126][T13596] FAT-fs (loop2): Can't find a valid FAT filesystem 13:12:34 executing program 3: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 13:12:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045440, 0x70f000) [ 435.378546][ T26] audit: type=1804 audit(1572354754.124:52): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/15/file0" dev="sda1" ino=16929 res=1 [ 435.489006][ T26] audit: type=1804 audit(1572354754.194:53): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/15/file0" dev="sda1" ino=16929 res=1 13:12:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@uni_xlate='uni_xlate=1'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:12:34 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:12:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) [ 435.728015][T13621] FAT-fs (loop2): bogus number of reserved sectors [ 435.860613][T13621] FAT-fs (loop2): Can't find a valid FAT filesystem 13:12:34 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x0, 0x20000513c3326, 0x0, 0x0, 0x2, [{}, {}]}) 13:12:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045440, 0x70f000) 13:12:34 executing program 3: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 13:12:34 executing program 1: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 13:12:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@uni_xlate='uni_xlate=1'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:12:34 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:12:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045440, 0x70f000) [ 436.301617][T13644] FAT-fs (loop2): bogus number of reserved sectors [ 436.332201][T13644] FAT-fs (loop2): Can't find a valid FAT filesystem 13:12:35 executing program 3: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 13:12:35 executing program 1: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) [ 436.549796][ T26] audit: type=1804 audit(1572354755.294:54): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/16/file0" dev="sda1" ino=17009 res=1 13:12:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@uni_xlate='uni_xlate=1'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:12:35 executing program 1: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) [ 436.649013][ T26] audit: type=1804 audit(1572354755.324:55): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/16/file0" dev="sda1" ino=17009 res=1 13:12:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'lo}user'}}]}) [ 436.848876][T13671] FAT-fs (loop2): bogus number of reserved sectors [ 436.879716][T13671] FAT-fs (loop2): Can't find a valid FAT filesystem [ 436.898242][T13675] FAT-fs (loop0): Unrecognized mount option "smackfsfloor=lo}user" or missing value [ 437.103245][T13675] FAT-fs (loop0): Unrecognized mount option "smackfsfloor=lo}user" or missing value 13:12:35 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x0, 0x20000513c3326, 0x0, 0x0, 0x2, [{}, {}]}) 13:12:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243426c7d2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 13:12:35 executing program 3: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 13:12:35 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1) 13:12:35 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'lo}user'}}]}) [ 437.288861][T13698] ebt_among: dst integrity fail: 3cd [ 437.327224][T13700] FAT-fs (loop0): Unrecognized mount option "smackfsfloor=lo}user" or missing value [ 437.333282][T13698] ebt_among: dst integrity fail: 3cd 13:12:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1) 13:12:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r1, 0xa01, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 437.470804][ T26] audit: type=1804 audit(1572354756.214:56): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/17/file0" dev="sda1" ino=17060 res=1 13:12:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 437.619076][ T26] audit: type=1804 audit(1572354756.264:57): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir713914049/syzkaller.2qFVXw/17/file0" dev="sda1" ino=17060 res=1 13:12:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'lo}user'}}]}) 13:12:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1) 13:12:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 437.854175][T13721] FAT-fs (loop0): Unrecognized mount option "smackfsfloor=lo}user" or missing value [ 438.136900][ T26] audit: type=1800 audit(1572354756.884:58): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16911 res=0 13:12:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'lo}user'}}]}) 13:12:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 13:12:37 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1) 13:12:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 438.372825][T13745] FAT-fs (loop0): Unrecognized mount option "smackfsfloor=lo}user" or missing value 13:12:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 13:12:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 13:12:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c) 13:12:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 13:12:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 13:12:49 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 13:12:49 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 13:12:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 13:12:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 13:12:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 13:12:49 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 13:12:50 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:53 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:53 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 13:12:53 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:53 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r2, r1) 13:12:54 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:54 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:54 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) 13:12:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x4, 0x4, 0x10000000001088, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x3c) 13:12:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}]]}}}]}, 0x3c}}, 0x0) 13:12:54 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) syz_open_dev$dspn(0x0, 0x0, 0x20000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r4 = syz_open_dev$usbfs(0x0, 0x907, 0x1) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000000)) [ 455.625911][T13890] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 13:12:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x4, 0x4, 0x10000000001088, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x3c) 13:12:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x7, {{0x2, 0x0, @multicast2}}}, 0x8812d0a685b8726) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 13:12:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x4, 0x4, 0x10000000001088, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x3c) 13:12:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x21, 0x0, 0x0) 13:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000002400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}}, 0x8) 13:12:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xf, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) 13:12:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x4, 0x4, 0x10000000001088, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x3c) 13:12:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x11}], @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x40}}, 0x0) 13:12:55 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0xc04) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:12:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000002400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}}, 0x8) [ 456.450828][T13926] netlink: 'syz-executor.5': attribute type 17 has an invalid length. 13:12:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)=0x4000000482f0ea7) 13:12:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x1}, {0x80000000}]}) 13:12:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0xe803]}, 0x2de) 13:12:55 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0xc04) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:12:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000002400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}}, 0x8) 13:12:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)=0x4000000482f0ea7) 13:12:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000002400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}}, 0x8) 13:12:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0xe803]}, 0x2de) 13:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x1}, {0x80000000}]}) 13:12:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)=0x4000000482f0ea7) 13:12:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f040000032a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 13:12:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0xe803]}, 0x2de) 13:12:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x1}, {0x80000000}]}) 13:12:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)=0x4000000482f0ea7) [ 457.566143][T13979] dlm: no local IP address has been set [ 457.598002][T13979] dlm: cannot start dlm lowcomms -107 [ 457.652026][T13988] dlm: no local IP address has been set [ 457.663765][T13988] dlm: cannot start dlm lowcomms -107 13:12:56 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0xc04) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:12:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0xe803]}, 0x2de) 13:12:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f040000032a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 13:12:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x1}, {0x80000000}]}) 13:12:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 458.172941][T14003] dlm: no local IP address has been set [ 458.182874][T14003] dlm: cannot start dlm lowcomms -107 13:12:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f040000032a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 13:12:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") keyctl$describe(0x1e, 0x0, 0x0, 0x0) [ 458.613576][T14020] dlm: no local IP address has been set [ 458.651274][T14020] dlm: cannot start dlm lowcomms -107 13:12:57 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0xc04) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:12:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f040000032a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 13:12:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8008551c, &(0x7f00000000c0)) 13:12:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8008551c, &(0x7f00000000c0)) 13:12:58 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x5) [ 459.273614][T14051] dlm: no local IP address has been set [ 459.283869][T14051] dlm: cannot start dlm lowcomms -107 13:12:58 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) socket(0x1e, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:12:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8008551c, &(0x7f00000000c0)) 13:12:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:58 executing program 2: socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 13:12:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8008551c, &(0x7f00000000c0)) 13:12:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x100000421) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1d8, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000005e000700000000000069aa0000000000", @ANYRES32=r6, @ANYBLOB="050000000000000d00000000"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 13:12:59 executing program 2: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:12:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 13:12:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x1) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cbea8d0278a55914db6d0a3d24a3f5876b34bb0d1ae6a4b0c8f2a4bd8de1d294ba2eb354fe965686f90689b88e822302efc2deb24de3900cc4c589cb91a4c5db9ad237633a0a6b72fe202b755890d1d00c9477c14845c610e9106e29740edd2f0d9940f5d8088544edb1fd93a092f3d2031658a15a23201da0ac729028a88245632f8409df57fb8a95b75463"], 0x8c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000500)=""/249, 0xf9}, {0x0}], 0x4, 0x10400003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x2}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:12:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@polexpire={0xc0, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in6=@loopback}, {}, {}, 0x0, 0x2}}}, 0xc0}, 0x8}, 0x0) 13:12:59 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) socket(0x1e, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:12:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 13:12:59 executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x7, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 13:12:59 executing program 2: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:13:00 executing program 3: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:13:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/28, 0x1c) getdents(r1, &(0x7f0000000080)=""/58, 0x3a) 13:13:00 executing program 2: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:13:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 13:13:00 executing program 3: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:13:00 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)='s', 0x1, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 13:13:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 13:13:00 executing program 2: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 461.739085][T14163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:13:00 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) socket(0x1e, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:13:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x7, 0x1, 0xd21}, 0x14}}, 0x0) 13:13:00 executing program 3: epoll_create1(0x58737d6207faf1c2) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000014c0)) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x1, @name="f40d8d948e14a21e22f3d685f40ae0116a2ac05cbbcece4f28dc5513953ee25b"}, 0x8, 0x7ff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x65ab8dc74a11eb32, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x0, "ce8b44145e2f523de46b0d29d445033ac5d680b4725ea59bb955f594e34cfda8", 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net//yz0\x8c\xc7\x19\xa3\\\xdaAe\xa5X\x9a/+@\x14\x81\xb13\x9di\x8b\xfb\xd6\x01\x00\x00\x00\x00\x00\x00\x00|\xbf\x15f!Um/\xa0\x1dI\xa7\xe8\xb7I3^k\xd71\x9c]\xaf\x15\xa5\x9e\xd7;\x19\x0f\x85\xe248Mb\xcfE\xd4z&\x87-\xb6Mf_\x9d\xc0\x93\t@v\xf1\xeeA\xdc\xc0\xa5N\xefXZa\x02\xc6\x13\xc6v\x1e\x19\xaap\xe1\x01\xf9\xe6\x192\b9\xe1\xd12[\x82t\f\x05L09A\xee\x9d<\x10\x93\x81\x16\xadM\xdfa.\xb9\x91\xb8\xb9\v# ?.\xb1 \xbeW\x996\xb1\x8c\xed\xc06f#\x1f\xc7\xfa\x8f\xed\xd4O\xef\'\xcf\alu\xe8\xfb\a\xe0\x02!.[a\xb0\xe8a\x97fu\v\x97\xf7\xc9\x02\xff\x96}\xb7\x92\xddq\xf5\xa6\xa6{\x81\xa5,\xae)/\x9a\x11\xd3\xf7\xf5\xb1\xc0\xa3t\xbb\\~\x85\xe2\x92\x9c\x9bzu`M\x97\x1e\x05&O\x9c', 0x1ff) socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x100, 0x0, 0x81, 0x401, 0x7537}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:13:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x30, r2, 0x9, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0xb}}}, 0x2a3}}, 0x0) 13:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0xa0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xfffffffffffffcc7, 0x2, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_OKEY={0x8}], @IFLA_VTI_LOCAL={0x0, 0x4, @loopback}, @IFLA_VTI_REMOTE={0x8}, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0xa0}}, 0x0) 13:13:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x11, 0xe3b, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 13:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") lookup_dcookie(0x0, 0xffffffffffffffff, 0x0) [ 462.127269][T14188] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. 13:13:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="2eadcd3a2844927107fe234467e6f24c078a337460389aea5b432a1f30777238a55a6d9df8cecbede02d038c4de7d50bb97487009de7d4b3e9900c612522c9f2b9bebb7b2888a0c3f0a70997d4b81dfac93a7b917f2b3682770f76bfdebd9c0d57c71599972cb02474c10af8d51b053b4f302ecf508c4f18163a3c75b4639aeb91c812c7ce4e7723ac5cb90e56eed03c7ec68913d73f4b9742f3d4e7d63eeda83a765d719540ff1efec1a22429b0f0a48805c01a19919a71f9ca94a028ac8ec375d1ccfb83e1bfc8b3573d8a720456544aac7868948a35bd5c01be2b27984c9385eaa922524805c9409acce3b471aed7fe3c7688c729ba74b36310886da62024b03271e0c73edd43485c1ac402f57e79792d83a3d9266b4157c493c91371532662dd0db66b3293bcaafbf23208fd5d4695f64af6b5ac93777e57ff5d5322ff6d5e85843a1ce967dfb1e6347c6db980d08b77d4fc1076611d84469cbba3891df65b2c511b8a3851039b5047779af713ce1ad96ae1c9ed13fa65858c7edb6707f89f957a64ce08d902a1921e952da1d13e3eae4a623cc7a7887bdd6622b08182e80537017104c0b81b333b628244e6854df42ad54593df82e55bb21a7490b3941735b2f583fe21257bd61241902e99ffe773064aeaa52527e099b5bf3529e2661b34500398aa40558cc94a71a4f36c258838821ea08459a9398485d9cc0012f7b9320b25c8e872210dfdeabadb23b288fb9fb3c825f9a689080f8d27a0b4720087218449f427b1f9f433f86aa808b53d931cdf3c13024c78139bf93b6e5795f2e0778587ab0d285d02dabb0e92d41d154e8d868200df58ecdca3314bb42ef889ae7e58b1fd41a2e8691ca78b03a295d625808fa1b2542423ac47c67077ee0c30b928887662b094dbf4276911da66b173c16c2695174ca3bbc292aef443b7f7948bfdf92a72ebdc8a983084753bdacd7b4b2280c9819d3a42302aaafb4140e0f4dc140ac46d714404f7a765aaef8f95efe348638246104d393cb51287f5f3c88591b085ce19391c48d33c52c41523fa1ee5e1be64dbd7f6d8987f9e3247e2e1145ffe95f4b4e18378a7fa27aa027df0b780bef2253f5982e31bd7918ae287b275fecd6baf4b06b86e3c5f4c179aa50ac74b349aedde7f5c6e56f6f22492405448c27dc5028f5b0716b9ad68dcf0df056df01ced0e4fd4c89d1066eb447c39f541c580fe674a3ebc9c3439bef54eaaac7202db01fc8b23ace33f2db0719f75f5bc39028e450ce4e8e0cea739f878744c52c5b0737e2b0f430b594b26c665fc661fd147f161b201b4826ca8c72a61fd38c71f03d1f63ae94dfa0fdfcc3f18c5f8c3d677749c53b9ee3ede807122953954af0eb57fec8d5a853e697c34e48557978d8e78c2c8504ee94fdbcfd4a7b596c507c33ffbe80ae0e1a4c3b0a3757497a5e2231ce32f689b90110bd3e221762d682e098ad3db87936369d35a159b3ab61107ec32b47624607ffeba2d1921b87c8799e905175655702d9808f21e82407c0b25fb9b3832981fd4e938a0689618fe66dd80449b6586e805419a3f8734dc02d6bf9ffc42b5f6c1f6d69afb20c6672fc1f0e179482360f0c7c4abc1615faac0aa34948725f5233d1da1173898587954b288d8183ea147595dfb7cc8e3a74f0e662dc94b371e8b546c46e6155ab99a8211b4ac58caf2400aed90269ef37b595a86e64578b5cf37ddd1b616b66bcfe1ae9b1d44651826f177dd9b85a4f1e910a2690dd7962ce29c21357965d38e0e4a37ca58fab50ed915f40aabe289c3185fac2b5004bd696dd4e76a79d44825df4f4113f005a4e564cda3ddc03cb6cf246157214443134e414dcb985a103904052bcfa6f44f50b4fb87719abbb4cdb50e158101184a6fd3308f72b901d55bb634a53a9bf107b9ff130a8ff76c69d7d2af79f912c6db163950460a61ad3bc2e989b1cdb9577d9222820f79a412ae2b85034e1aa4bfbd4d29942a195f0424f8d9fb04b588f6692e75037480ab7398095c2a99ce9c74069e1acefd4f6f16a9e4a4d386557c574ab75986f354f17dacd159d7f28fc4d635aabf1430fda722cae594412606cc89c2467440f3e4c111e3c7280a44d76ad520d3ab250bd957ac42be9c6a5e5df42ebe4b1558f1e02d8fc58c99f30ab1569ca0ec16c0dac9767754a9b4251598734a53d6b3a45721e17959a1883da54805ea677941381ebce1bb41aed8645db60630fac2ffdc9bd30a01d7441d8a5cc25d346d1218054a70c1758a88756aa5da88c4584557de1170167db179d02bcc4a1dbf0deae968ae9ba003404bf849dde1271c51aff1c1e4aa733407505d2340c2d5a589320946e28e775f3fc74d3e7fd5b38ec4d4a37e0458b267f7437a1a7810da8391a1600d224969e414009f7529ffab1cb9a204a1b603900a55301881d55d141b548d6d5048e92a8c78cd98c106b480a6507ecd2005f8c253e42b443e02d03b6011e73c987d1086d8497c1fa25ef76043ed5f74f37e68d5d4742665ec78c58abe7af569a1ad5e2714a4204634761b6502f56ade57cbc8599d1547250d809c7eb9c208a5eb8229d7f830c5716aec41654a5080a032b0fb5767603297e907c6c3dec726a59cfdd14d6fd5655268c1271a57ea7cec2df9541ca3ff4ea0d517d02a8c81c1b32bc57beaebc5d659206ddf3b2364f34eb60b8c5cdcb90f705aa1ff256b2fa0f03f8d7c05846e0c5588f3e6b725f53e2d90b87d4a2b2cf5d663bf80edfefd980532f0be5987c3ae7720551401e23d90b46b9c1ab5d2bbe6b0186e3cc68733f2f24bab18b0cccd3fbaca4f8eb492ae770f7dc9edfbd8b7fdd0e6dbab743df37912f73964fde64bbd2749f38ac6a48e86ebb11829831fe1a6a7b871fb6b66e1082d7142ee7e7eb819f9eb41f51dd476d37c5cf59fdbd4e6fef739c43af29badb57f0f5472ea2482a9894b134c264100374998d0433bbbbf59cfb5415616861dfba5ac0b08a89a25fd9cf646fbf58229dd7f977d2a6113fb6e595d1918c3bb44013cc7f770cc714cb374b66d8a1b7e6335660b4ca7f5448d4e14fe6872c9a39ca52b6d73ed489d8a9274cd10a82f1f2e2e7c8c12977edcc98b96b24b501b25370e44770179f3d5b4a15f7c3d47454543547716a3073b0a0193d9436b72d30fcc26f963063d1df61eb4308df99658173724b4d6f51f4cb81c2a62fb8c24343ec4b7bef20c404c3ba0053b50bb8f39391296f7174febccf429c6d79f59ce0e5846ef940efa810e971f811bd0b81c182408e6a9e474d3f8d4afd09acf4856107162e423c546202b54a17ebffeed44e042197bd5840717c5ce4fc7e88b1c4ead38283ccfc7a9571b8437dffb2eada29a03e592ef2314e1dc1cc08ae915bbd1ba6f77937e2cf5a43f063341a3cf797f1bb8252358088f500ee1b872c1f453ec44de860821e834249f2609feb8003fcebd1a233dd7dc68ca55a8d0227b7b94d487f746d3cb795e5f0753421cf358d965a805a1243c3ecc1e1cf2245476774d68d4c607f7803c928df300e15bb34623a69537021bdd05f0621ad7068e0ed18c1f0187b727634153faa4bac472b355e1444a297df248766f566c78307668fbd1a98d36d118c9e8d5a9738fa2a1e62cb45bb04be9fb5a3128b053ca7ed09a8a0c7ea44b17fb3155fc259fc5136a9bea5efce8bfe97162ecb242f9e35272649aa96182d4bb2b720ee804fd118c7610dc16e3f33bbe13ede8f02c76fd2bde976d2918097c0c1204321193609435ba762b0bd8a63143f4ef74cbd17825042b7a670a6b1ac86ea532ad7b7975918b42bdd541792d4416cfa1f12c6fdf5f7fd9b4fa575654db16c8e9e3e411647aa66d18c2778a56b0d4c66b48a4bf7202c29b790d709d21ec06deeb33af988f69a5980be30268e637fc6e02cde388d2804ff6591cb9ed4932dc2e8850f33800a5697a5c1e79bc3f2fb633b476d9d1d76d465b25fea5fd698238c16a49ef622c201990f2a64216eed18b492e6def10b374237be5519f876a7d71e25e606e45a6727eaf5d94216596db6fccd1267449debcf07665270e923aad76a7636e2dfe7d99e8", 0xb48}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="9a00003a016766c7442402810000006766c744240600000000670f011c24993e0f070fee7d00660f381c9a0500b80b010f00d0f3ad0fc77354baf80c66b828c5408f66ef2bbafc0c0c0500efd9fe", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="f94898ac4ce24109"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:13:01 executing program 4: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x2) 13:13:01 executing program 2: socketpair(0x21, 0x2, 0x2, &(0x7f0000000280)) 13:13:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044018}, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13:13:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 13:13:01 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) socket(0x1e, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:13:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) 13:13:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="2eadcd3a2844927107fe234467e6f24c078a337460389aea5b432a1f30777238a55a6d9df8cecbede02d038c4de7d50bb97487009de7d4b3e9900c612522c9f2b9bebb7b2888a0c3f0a70997d4b81dfac93a7b917f2b3682770f76bfdebd9c0d57c71599972cb02474c10af8d51b053b4f302ecf508c4f18163a3c75b4639aeb91c812c7ce4e7723ac5cb90e56eed03c7ec68913d73f4b9742f3d4e7d63eeda83a765d719540ff1efec1a22429b0f0a48805c01a19919a71f9ca94a028ac8ec375d1ccfb83e1bfc8b3573d8a720456544aac7868948a35bd5c01be2b27984c9385eaa922524805c9409acce3b471aed7fe3c7688c729ba74b36310886da62024b03271e0c73edd43485c1ac402f57e79792d83a3d9266b4157c493c91371532662dd0db66b3293bcaafbf23208fd5d4695f64af6b5ac93777e57ff5d5322ff6d5e85843a1ce967dfb1e6347c6db980d08b77d4fc1076611d84469cbba3891df65b2c511b8a3851039b5047779af713ce1ad96ae1c9ed13fa65858c7edb6707f89f957a64ce08d902a1921e952da1d13e3eae4a623cc7a7887bdd6622b08182e80537017104c0b81b333b628244e6854df42ad54593df82e55bb21a7490b3941735b2f583fe21257bd61241902e99ffe773064aeaa52527e099b5bf3529e2661b34500398aa40558cc94a71a4f36c258838821ea08459a9398485d9cc0012f7b9320b25c8e872210dfdeabadb23b288fb9fb3c825f9a689080f8d27a0b4720087218449f427b1f9f433f86aa808b53d931cdf3c13024c78139bf93b6e5795f2e0778587ab0d285d02dabb0e92d41d154e8d868200df58ecdca3314bb42ef889ae7e58b1fd41a2e8691ca78b03a295d625808fa1b2542423ac47c67077ee0c30b928887662b094dbf4276911da66b173c16c2695174ca3bbc292aef443b7f7948bfdf92a72ebdc8a983084753bdacd7b4b2280c9819d3a42302aaafb4140e0f4dc140ac46d714404f7a765aaef8f95efe348638246104d393cb51287f5f3c88591b085ce19391c48d33c52c41523fa1ee5e1be64dbd7f6d8987f9e3247e2e1145ffe95f4b4e18378a7fa27aa027df0b780bef2253f5982e31bd7918ae287b275fecd6baf4b06b86e3c5f4c179aa50ac74b349aedde7f5c6e56f6f22492405448c27dc5028f5b0716b9ad68dcf0df056df01ced0e4fd4c89d1066eb447c39f541c580fe674a3ebc9c3439bef54eaaac7202db01fc8b23ace33f2db0719f75f5bc39028e450ce4e8e0cea739f878744c52c5b0737e2b0f430b594b26c665fc661fd147f161b201b4826ca8c72a61fd38c71f03d1f63ae94dfa0fdfcc3f18c5f8c3d677749c53b9ee3ede807122953954af0eb57fec8d5a853e697c34e48557978d8e78c2c8504ee94fdbcfd4a7b596c507c33ffbe80ae0e1a4c3b0a3757497a5e2231ce32f689b90110bd3e221762d682e098ad3db87936369d35a159b3ab61107ec32b47624607ffeba2d1921b87c8799e905175655702d9808f21e82407c0b25fb9b3832981fd4e938a0689618fe66dd80449b6586e805419a3f8734dc02d6bf9ffc42b5f6c1f6d69afb20c6672fc1f0e179482360f0c7c4abc1615faac0aa34948725f5233d1da1173898587954b288d8183ea147595dfb7cc8e3a74f0e662dc94b371e8b546c46e6155ab99a8211b4ac58caf2400aed90269ef37b595a86e64578b5cf37ddd1b616b66bcfe1ae9b1d44651826f177dd9b85a4f1e910a2690dd7962ce29c21357965d38e0e4a37ca58fab50ed915f40aabe289c3185fac2b5004bd696dd4e76a79d44825df4f4113f005a4e564cda3ddc03cb6cf246157214443134e414dcb985a103904052bcfa6f44f50b4fb87719abbb4cdb50e158101184a6fd3308f72b901d55bb634a53a9bf107b9ff130a8ff76c69d7d2af79f912c6db163950460a61ad3bc2e989b1cdb9577d9222820f79a412ae2b85034e1aa4bfbd4d29942a195f0424f8d9fb04b588f6692e75037480ab7398095c2a99ce9c74069e1acefd4f6f16a9e4a4d386557c574ab75986f354f17dacd159d7f28fc4d635aabf1430fda722cae594412606cc89c2467440f3e4c111e3c7280a44d76ad520d3ab250bd957ac42be9c6a5e5df42ebe4b1558f1e02d8fc58c99f30ab1569ca0ec16c0dac9767754a9b4251598734a53d6b3a45721e17959a1883da54805ea677941381ebce1bb41aed8645db60630fac2ffdc9bd30a01d7441d8a5cc25d346d1218054a70c1758a88756aa5da88c4584557de1170167db179d02bcc4a1dbf0deae968ae9ba003404bf849dde1271c51aff1c1e4aa733407505d2340c2d5a589320946e28e775f3fc74d3e7fd5b38ec4d4a37e0458b267f7437a1a7810da8391a1600d224969e414009f7529ffab1cb9a204a1b603900a55301881d55d141b548d6d5048e92a8c78cd98c106b480a6507ecd2005f8c253e42b443e02d03b6011e73c987d1086d8497c1fa25ef76043ed5f74f37e68d5d4742665ec78c58abe7af569a1ad5e2714a4204634761b6502f56ade57cbc8599d1547250d809c7eb9c208a5eb8229d7f830c5716aec41654a5080a032b0fb5767603297e907c6c3dec726a59cfdd14d6fd5655268c1271a57ea7cec2df9541ca3ff4ea0d517d02a8c81c1b32bc57beaebc5d659206ddf3b2364f34eb60b8c5cdcb90f705aa1ff256b2fa0f03f8d7c05846e0c5588f3e6b725f53e2d90b87d4a2b2cf5d663bf80edfefd980532f0be5987c3ae7720551401e23d90b46b9c1ab5d2bbe6b0186e3cc68733f2f24bab18b0cccd3fbaca4f8eb492ae770f7dc9edfbd8b7fdd0e6dbab743df37912f73964fde64bbd2749f38ac6a48e86ebb11829831fe1a6a7b871fb6b66e1082d7142ee7e7eb819f9eb41f51dd476d37c5cf59fdbd4e6fef739c43af29badb57f0f5472ea2482a9894b134c264100374998d0433bbbbf59cfb5415616861dfba5ac0b08a89a25fd9cf646fbf58229dd7f977d2a6113fb6e595d1918c3bb44013cc7f770cc714cb374b66d8a1b7e6335660b4ca7f5448d4e14fe6872c9a39ca52b6d73ed489d8a9274cd10a82f1f2e2e7c8c12977edcc98b96b24b501b25370e44770179f3d5b4a15f7c3d47454543547716a3073b0a0193d9436b72d30fcc26f963063d1df61eb4308df99658173724b4d6f51f4cb81c2a62fb8c24343ec4b7bef20c404c3ba0053b50bb8f39391296f7174febccf429c6d79f59ce0e5846ef940efa810e971f811bd0b81c182408e6a9e474d3f8d4afd09acf4856107162e423c546202b54a17ebffeed44e042197bd5840717c5ce4fc7e88b1c4ead38283ccfc7a9571b8437dffb2eada29a03e592ef2314e1dc1cc08ae915bbd1ba6f77937e2cf5a43f063341a3cf797f1bb8252358088f500ee1b872c1f453ec44de860821e834249f2609feb8003fcebd1a233dd7dc68ca55a8d0227b7b94d487f746d3cb795e5f0753421cf358d965a805a1243c3ecc1e1cf2245476774d68d4c607f7803c928df300e15bb34623a69537021bdd05f0621ad7068e0ed18c1f0187b727634153faa4bac472b355e1444a297df248766f566c78307668fbd1a98d36d118c9e8d5a9738fa2a1e62cb45bb04be9fb5a3128b053ca7ed09a8a0c7ea44b17fb3155fc259fc5136a9bea5efce8bfe97162ecb242f9e35272649aa96182d4bb2b720ee804fd118c7610dc16e3f33bbe13ede8f02c76fd2bde976d2918097c0c1204321193609435ba762b0bd8a63143f4ef74cbd17825042b7a670a6b1ac86ea532ad7b7975918b42bdd541792d4416cfa1f12c6fdf5f7fd9b4fa575654db16c8e9e3e411647aa66d18c2778a56b0d4c66b48a4bf7202c29b790d709d21ec06deeb33af988f69a5980be30268e637fc6e02cde388d2804ff6591cb9ed4932dc2e8850f33800a5697a5c1e79bc3f2fb633b476d9d1d76d465b25fea5fd698238c16a49ef622c201990f2a64216eed18b492e6def10b374237be5519f876a7d71e25e606e45a6727eaf5d94216596db6fccd1267449debcf07665270e923aad76a7636e2dfe7d99e8", 0xb48}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="9a00003a016766c7442402810000006766c744240600000000670f011c24993e0f070fee7d00660f381c9a0500b80b010f00d0f3ad0fc77354baf80c66b828c5408f66ef2bbafc0c0c0500efd9fe", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="f94898ac4ce24109"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:13:01 executing program 2: socketpair(0x21, 0x2, 0x2, &(0x7f0000000280)) 13:13:01 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x0, 0x0, @loopback, @mcast2, {[], @icmpv6=@mld={0x2f, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 13:13:01 executing program 2: socketpair(0x21, 0x2, 0x2, &(0x7f0000000280)) 13:13:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7073c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) 13:13:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) 13:13:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044018}, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13:13:01 executing program 2: socketpair(0x21, 0x2, 0x2, &(0x7f0000000280)) [ 463.130135][T14244] tls_set_device_offload_rx: netdev not found 13:13:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) [ 463.193134][T14247] tls_set_device_offload_rx: netdev not found 13:13:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="2eadcd3a2844927107fe234467e6f24c078a337460389aea5b432a1f30777238a55a6d9df8cecbede02d038c4de7d50bb97487009de7d4b3e9900c612522c9f2b9bebb7b2888a0c3f0a70997d4b81dfac93a7b917f2b3682770f76bfdebd9c0d57c71599972cb02474c10af8d51b053b4f302ecf508c4f18163a3c75b4639aeb91c812c7ce4e7723ac5cb90e56eed03c7ec68913d73f4b9742f3d4e7d63eeda83a765d719540ff1efec1a22429b0f0a48805c01a19919a71f9ca94a028ac8ec375d1ccfb83e1bfc8b3573d8a720456544aac7868948a35bd5c01be2b27984c9385eaa922524805c9409acce3b471aed7fe3c7688c729ba74b36310886da62024b03271e0c73edd43485c1ac402f57e79792d83a3d9266b4157c493c91371532662dd0db66b3293bcaafbf23208fd5d4695f64af6b5ac93777e57ff5d5322ff6d5e85843a1ce967dfb1e6347c6db980d08b77d4fc1076611d84469cbba3891df65b2c511b8a3851039b5047779af713ce1ad96ae1c9ed13fa65858c7edb6707f89f957a64ce08d902a1921e952da1d13e3eae4a623cc7a7887bdd6622b08182e80537017104c0b81b333b628244e6854df42ad54593df82e55bb21a7490b3941735b2f583fe21257bd61241902e99ffe773064aeaa52527e099b5bf3529e2661b34500398aa40558cc94a71a4f36c258838821ea08459a9398485d9cc0012f7b9320b25c8e872210dfdeabadb23b288fb9fb3c825f9a689080f8d27a0b4720087218449f427b1f9f433f86aa808b53d931cdf3c13024c78139bf93b6e5795f2e0778587ab0d285d02dabb0e92d41d154e8d868200df58ecdca3314bb42ef889ae7e58b1fd41a2e8691ca78b03a295d625808fa1b2542423ac47c67077ee0c30b928887662b094dbf4276911da66b173c16c2695174ca3bbc292aef443b7f7948bfdf92a72ebdc8a983084753bdacd7b4b2280c9819d3a42302aaafb4140e0f4dc140ac46d714404f7a765aaef8f95efe348638246104d393cb51287f5f3c88591b085ce19391c48d33c52c41523fa1ee5e1be64dbd7f6d8987f9e3247e2e1145ffe95f4b4e18378a7fa27aa027df0b780bef2253f5982e31bd7918ae287b275fecd6baf4b06b86e3c5f4c179aa50ac74b349aedde7f5c6e56f6f22492405448c27dc5028f5b0716b9ad68dcf0df056df01ced0e4fd4c89d1066eb447c39f541c580fe674a3ebc9c3439bef54eaaac7202db01fc8b23ace33f2db0719f75f5bc39028e450ce4e8e0cea739f878744c52c5b0737e2b0f430b594b26c665fc661fd147f161b201b4826ca8c72a61fd38c71f03d1f63ae94dfa0fdfcc3f18c5f8c3d677749c53b9ee3ede807122953954af0eb57fec8d5a853e697c34e48557978d8e78c2c8504ee94fdbcfd4a7b596c507c33ffbe80ae0e1a4c3b0a3757497a5e2231ce32f689b90110bd3e221762d682e098ad3db87936369d35a159b3ab61107ec32b47624607ffeba2d1921b87c8799e905175655702d9808f21e82407c0b25fb9b3832981fd4e938a0689618fe66dd80449b6586e805419a3f8734dc02d6bf9ffc42b5f6c1f6d69afb20c6672fc1f0e179482360f0c7c4abc1615faac0aa34948725f5233d1da1173898587954b288d8183ea147595dfb7cc8e3a74f0e662dc94b371e8b546c46e6155ab99a8211b4ac58caf2400aed90269ef37b595a86e64578b5cf37ddd1b616b66bcfe1ae9b1d44651826f177dd9b85a4f1e910a2690dd7962ce29c21357965d38e0e4a37ca58fab50ed915f40aabe289c3185fac2b5004bd696dd4e76a79d44825df4f4113f005a4e564cda3ddc03cb6cf246157214443134e414dcb985a103904052bcfa6f44f50b4fb87719abbb4cdb50e158101184a6fd3308f72b901d55bb634a53a9bf107b9ff130a8ff76c69d7d2af79f912c6db163950460a61ad3bc2e989b1cdb9577d9222820f79a412ae2b85034e1aa4bfbd4d29942a195f0424f8d9fb04b588f6692e75037480ab7398095c2a99ce9c74069e1acefd4f6f16a9e4a4d386557c574ab75986f354f17dacd159d7f28fc4d635aabf1430fda722cae594412606cc89c2467440f3e4c111e3c7280a44d76ad520d3ab250bd957ac42be9c6a5e5df42ebe4b1558f1e02d8fc58c99f30ab1569ca0ec16c0dac9767754a9b4251598734a53d6b3a45721e17959a1883da54805ea677941381ebce1bb41aed8645db60630fac2ffdc9bd30a01d7441d8a5cc25d346d1218054a70c1758a88756aa5da88c4584557de1170167db179d02bcc4a1dbf0deae968ae9ba003404bf849dde1271c51aff1c1e4aa733407505d2340c2d5a589320946e28e775f3fc74d3e7fd5b38ec4d4a37e0458b267f7437a1a7810da8391a1600d224969e414009f7529ffab1cb9a204a1b603900a55301881d55d141b548d6d5048e92a8c78cd98c106b480a6507ecd2005f8c253e42b443e02d03b6011e73c987d1086d8497c1fa25ef76043ed5f74f37e68d5d4742665ec78c58abe7af569a1ad5e2714a4204634761b6502f56ade57cbc8599d1547250d809c7eb9c208a5eb8229d7f830c5716aec41654a5080a032b0fb5767603297e907c6c3dec726a59cfdd14d6fd5655268c1271a57ea7cec2df9541ca3ff4ea0d517d02a8c81c1b32bc57beaebc5d659206ddf3b2364f34eb60b8c5cdcb90f705aa1ff256b2fa0f03f8d7c05846e0c5588f3e6b725f53e2d90b87d4a2b2cf5d663bf80edfefd980532f0be5987c3ae7720551401e23d90b46b9c1ab5d2bbe6b0186e3cc68733f2f24bab18b0cccd3fbaca4f8eb492ae770f7dc9edfbd8b7fdd0e6dbab743df37912f73964fde64bbd2749f38ac6a48e86ebb11829831fe1a6a7b871fb6b66e1082d7142ee7e7eb819f9eb41f51dd476d37c5cf59fdbd4e6fef739c43af29badb57f0f5472ea2482a9894b134c264100374998d0433bbbbf59cfb5415616861dfba5ac0b08a89a25fd9cf646fbf58229dd7f977d2a6113fb6e595d1918c3bb44013cc7f770cc714cb374b66d8a1b7e6335660b4ca7f5448d4e14fe6872c9a39ca52b6d73ed489d8a9274cd10a82f1f2e2e7c8c12977edcc98b96b24b501b25370e44770179f3d5b4a15f7c3d47454543547716a3073b0a0193d9436b72d30fcc26f963063d1df61eb4308df99658173724b4d6f51f4cb81c2a62fb8c24343ec4b7bef20c404c3ba0053b50bb8f39391296f7174febccf429c6d79f59ce0e5846ef940efa810e971f811bd0b81c182408e6a9e474d3f8d4afd09acf4856107162e423c546202b54a17ebffeed44e042197bd5840717c5ce4fc7e88b1c4ead38283ccfc7a9571b8437dffb2eada29a03e592ef2314e1dc1cc08ae915bbd1ba6f77937e2cf5a43f063341a3cf797f1bb8252358088f500ee1b872c1f453ec44de860821e834249f2609feb8003fcebd1a233dd7dc68ca55a8d0227b7b94d487f746d3cb795e5f0753421cf358d965a805a1243c3ecc1e1cf2245476774d68d4c607f7803c928df300e15bb34623a69537021bdd05f0621ad7068e0ed18c1f0187b727634153faa4bac472b355e1444a297df248766f566c78307668fbd1a98d36d118c9e8d5a9738fa2a1e62cb45bb04be9fb5a3128b053ca7ed09a8a0c7ea44b17fb3155fc259fc5136a9bea5efce8bfe97162ecb242f9e35272649aa96182d4bb2b720ee804fd118c7610dc16e3f33bbe13ede8f02c76fd2bde976d2918097c0c1204321193609435ba762b0bd8a63143f4ef74cbd17825042b7a670a6b1ac86ea532ad7b7975918b42bdd541792d4416cfa1f12c6fdf5f7fd9b4fa575654db16c8e9e3e411647aa66d18c2778a56b0d4c66b48a4bf7202c29b790d709d21ec06deeb33af988f69a5980be30268e637fc6e02cde388d2804ff6591cb9ed4932dc2e8850f33800a5697a5c1e79bc3f2fb633b476d9d1d76d465b25fea5fd698238c16a49ef622c201990f2a64216eed18b492e6def10b374237be5519f876a7d71e25e606e45a6727eaf5d94216596db6fccd1267449debcf07665270e923aad76a7636e2dfe7d99e8", 0xb48}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="9a00003a016766c7442402810000006766c744240600000000670f011c24993e0f070fee7d00660f381c9a0500b80b010f00d0f3ad0fc77354baf80c66b828c5408f66ef2bbafc0c0c0500efd9fe", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="f94898ac4ce24109"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:13:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044018}, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13:13:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) 13:13:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7073c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) 13:13:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) 13:13:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x0) [ 463.786702][T14266] tls_set_device_offload_rx: netdev not found 13:13:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0xb48}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="9a00003a016766c7442402810000006766c744240600000000670f011c24993e0f070fee7d00660f381c9a0500b80b010f00d0f3ad0fc77354baf80c66b828c5408f66ef2bbafc0c0c0500efd9fe", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="f94898ac4ce24109"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:13:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x8000000, 0x0, "d8cc178688cb208134e9a7fd09a6cafafc45cdd76dc6e4c545221d788dbd81f9"}) 13:13:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7073c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) 13:13:02 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000280)={0xa, 0x0}) 13:13:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) [ 464.138568][T14282] tls_set_device_offload_rx: netdev not found 13:13:02 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, &(0x7f00000004c0)) 13:13:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7073c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) 13:13:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044018}, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13:13:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x8000000, 0x0, "d8cc178688cb208134e9a7fd09a6cafafc45cdd76dc6e4c545221d788dbd81f9"}) 13:13:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000fc0)={0x20}, 0x0, 0x0, &(0x7f0000003000)={0x77359400}) 13:13:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 464.424549][T14299] tls_set_device_offload_rx: netdev not found 13:13:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x8000000, 0x0, "d8cc178688cb208134e9a7fd09a6cafafc45cdd76dc6e4c545221d788dbd81f9"}) 13:13:03 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r1 = open(0x0, 0x6e4ac0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = gettid() tkill(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x3, &(0x7f0000000140)=':}\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r4) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 13:13:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000100)=0x4) 13:13:03 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000300)='./bus\x00', 0x200) 13:13:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:13:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x8000000, 0x0, "d8cc178688cb208134e9a7fd09a6cafafc45cdd76dc6e4c545221d788dbd81f9"}) 13:13:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc0505510, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 13:13:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000100)=0x4) 13:13:03 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r1 = open(0x0, 0x6e4ac0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = gettid() tkill(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x3, &(0x7f0000000140)=':}\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r4) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 13:13:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc0505510, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 13:13:03 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xffb8, 0x1400}], 0x0, 0x0) 13:13:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000100)=0x4) 13:13:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc0505510, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 13:13:04 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r1 = open(0x0, 0x6e4ac0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = gettid() tkill(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x3, &(0x7f0000000140)=':}\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r4) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 13:13:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc0505510, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 465.490719][T14363] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.589267][T14363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 465.677244][T14363] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(288884992) [ 465.777347][T14363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 465.887209][T14363] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.906532][T14363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 465.940812][T14363] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(288884992) [ 465.951202][T14363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 13:13:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:13:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)) 13:13:06 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) r1 = open(0x0, 0x6e4ac0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = gettid() tkill(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x3, &(0x7f0000000140)=':}\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r4) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 13:13:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x8, @vbi}) 13:13:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:06 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./control\x00', 0x1000, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 13:13:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) 13:13:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840000000000f630c4000"], 0x0, 0x0, 0x0}) 13:13:07 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="da", 0x1, 0x0, 0x0, 0x0) [ 468.615327][T14500] binder: 14496:14500 unknown command 0 [ 468.655604][T14500] binder: 14496:14500 ioctl c0306201 20000180 returned -22 13:13:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840000000000f630c4000"], 0x0, 0x0, 0x0}) [ 468.923280][T14529] binder: 14525:14529 unknown command 0 [ 468.946651][T14529] binder: 14525:14529 ioctl c0306201 20000180 returned -22 13:13:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:13:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:09 executing program 5: open_tree(0xffffffffffffffff, 0x0, 0x141a80) 13:13:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840000000000f630c4000"], 0x0, 0x0, 0x0}) [ 471.007486][T14544] binder: 14538:14544 unknown command 0 13:13:09 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) [ 471.049517][T14544] binder: 14538:14544 ioctl c0306201 20000180 returned -22 13:13:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840000000000f630c4000"], 0x0, 0x0, 0x0}) 13:13:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:10 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) [ 471.498507][T14568] binder: 14565:14568 unknown command 0 [ 471.547816][T14568] binder: 14565:14568 ioctl c0306201 20000180 returned -22 13:13:10 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4000000004, &(0x7f0000000080)="441f07638d0000000000000e6d0000b69c14bbf1a236b160ba6b3abe0f", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 13:13:10 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 13:13:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:13:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204cede607a25340b658d87c9976cae3a9a9e90785afd31885d36241100000000ef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000"], 0x10}}, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:12 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 13:13:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) 13:13:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x9c) 13:13:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd80, &(0x7f0000000280)=[{&(0x7f0000000000)="1400000052008102a00f80854a36b8ab1c959916", 0x14}], 0x1}, 0x0) 13:13:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:13:13 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80026) fallocate(r0, 0x10, 0x0, 0x28120002) 13:13:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0xff8c) 13:13:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:13:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x0, 0x0, 0x0, 0x10000000002) [ 474.862600][T14595] syz-executor.4 (14595) used greatest stack depth: 22744 bytes left 13:13:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 13:13:15 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newlink={0x60, 0x10, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x34, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0x60}}, 0x0) 13:13:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) dup2(r0, r1) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 13:13:15 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 13:13:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06030000a843089100fe80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) 13:13:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:13:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e4d070bb0200000005010d4da5920000180010"], 0x13) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 477.175974][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.213803][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:13:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newlink={0x60, 0x10, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x34, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0x60}}, 0x0) 13:13:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:13:16 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 13:13:16 executing program 2: futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) 13:13:16 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:13:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e4d070bb0200000005010d4da5920000180010"], 0x13) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:13:16 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="240000001a0007041dfffd946f6105000a7400001f0000000000080008001b003a000000", 0x24}], 0x1}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x16, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:13:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newlink={0x60, 0x10, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x34, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0x60}}, 0x0) [ 477.542590][ T26] audit: type=1804 audit(1572354796.294:59): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir966028394/syzkaller.CwzLpm/57/bus" dev="sda1" ino=16673 res=1 [ 477.625883][T14698] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 477.643232][ T26] audit: type=1804 audit(1572354796.294:60): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir966028394/syzkaller.CwzLpm/57/bus" dev="sda1" ino=16673 res=1 13:13:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e4d070bb0200000005010d4da5920000180010"], 0x13) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:13:16 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 13:13:16 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newlink={0x60, 0x10, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x40, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x34, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0x60}}, 0x0) 13:13:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e4d070bb0200000005010d4da5920000180010"], 0x13) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:13:16 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 13:13:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 478.308789][ T26] audit: type=1804 audit(1572354797.054:61): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir966028394/syzkaller.CwzLpm/57/bus" dev="sda1" ino=16673 res=1 [ 478.376285][ T26] audit: type=1804 audit(1572354797.054:62): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir966028394/syzkaller.CwzLpm/57/bus" dev="sda1" ino=16673 res=1 13:13:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @remote}, @in=@initdev}}, {{@in6=@local}}}, &(0x7f00000001c0)=0xe8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x68}}, 0x0) 13:13:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:17 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 13:13:17 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:17 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 13:13:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000010a096368fe07072b03003700000a0014000200450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) 13:13:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105000200000a1f0000030028080008000f00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 13:13:17 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001200)={@val, @void, @ipv6={0x0, 0x6, "d615e0", 0x500, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4, 0x0, 0x3]}, @loopback={0xfffffffe}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0x52c) [ 478.665019][T14770] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 478.673379][T14770] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 13:13:17 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 13:13:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r8 = dup2(r6, r7) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x1ff) [ 478.755137][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:13:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 13:13:17 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:17 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 13:13:17 executing program 3: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:18 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 13:13:18 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001200)={@val, @void, @ipv6={0x0, 0x6, "d615e0", 0x500, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4, 0x0, 0x3]}, @loopback={0xfffffffe}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0x52c) 13:13:18 executing program 2: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:18 executing program 3: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x3) 13:13:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 13:13:18 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:18 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001200)={@val, @void, @ipv6={0x0, 0x6, "d615e0", 0x500, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4, 0x0, 0x3]}, @loopback={0xfffffffe}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0x52c) 13:13:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x3) 13:13:18 executing program 2: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:18 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001200)={@val, @void, @ipv6={0x0, 0x6, "d615e0", 0x500, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4, 0x0, 0x3]}, @loopback={0xfffffffe}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}, 0x52c) 13:13:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 13:13:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x3) 13:13:19 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, 0x0}]) 13:13:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 13:13:19 executing program 3: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x3) 13:13:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c) 13:13:19 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:19 executing program 2: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r2, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:13:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 13:13:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 13:13:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000380)='msdos\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@fat=@fmask={'fmask'}}]}) 13:13:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xef, 0x1}, 0x800, 0xb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x121) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0x40000000, 0x10}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={r1, 0x1f, 0x4}, 0xc) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-', 0x2}, 0x28, 0x1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x40) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x1b) read(r3, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="5300000076000000667dc336d9a289c84b0ddc26cb851e2e5d915dd7a8202bdadd8eff2c79f19c6dc26aa195c7f8967a23505a88640700ba29574334fc1998f3722501e0d975bb7d43d52f92a23f923a78b65884fb06b280127942548e4f205c9be4f21f00"], 0xc7ba546857cd85b3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r4, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) lseek(r4, 0x0, 0x2) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) sendfile(r4, r4, &(0x7f00000001c0), 0x7f8) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:13:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c) 13:13:20 executing program 2: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f0000001340)="2f32f4572d1acefb", 0x8, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x77359400}) [ 481.301282][T14892] FAT-fs (loop0): bogus number of reserved sectors 13:13:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) [ 481.350131][T14892] FAT-fs (loop0): Can't find a valid FAT filesystem 13:13:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:13:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c) 13:13:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f00000002c0)) [ 481.517118][T14892] FAT-fs (loop0): bogus number of reserved sectors [ 481.558572][T14892] FAT-fs (loop0): Can't find a valid FAT filesystem 13:13:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 13:13:20 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/203, 0xcb}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x18) 13:13:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f00000002c0)) 13:13:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='((trustedvmnet1@[)\x00') 13:13:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 13:13:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000011c0)="9a00000000b100660f001deb6f000065260f79b900000080640fc71ab8f5ffffffbaffffffff0f3066b893000f070f01c8b8df000000c744240000000000c744240202000000c7442406000000000f011c240f300f0fd4aec4e27d18c70f06b8000000800f23d00f21f8352000000a0f23f8000000000f10c744240000000000c744240200000000c7c2a406000000000f011424", 0x94}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c) 13:13:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f00000002c0)) 13:13:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r1, 0x115, 0x0, 0x0, {0x14}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 13:13:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:13:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f00000002c0)) 13:13:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 13:13:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x5, 0x4) 13:13:21 executing program 5: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x6) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) r2 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local}, 0x10) 13:13:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000005) fallocate(r0, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) lseek(r1, 0x0, 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 482.749200][T14971] device lo entered promiscuous mode 13:13:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x5, 0x4) [ 482.781687][T14963] device lo left promiscuous mode 13:13:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001c000729f500000000000000077a0000", @ANYRES32=r2, @ANYBLOB="700b00000a000200aaaaaaaaaa0c001f010000006528a557b25f2034b7c8dc865f891444f263e7bddd8111f4bb3118167159ae617fa128d3071110cf80363f4b61169ed5d536d68cf2303e3425cacf7c8de5c884bab629dbd890cc26321688af85025af0a02de5d44a9bcb652736a6457461fc96673f7da981da364c45826f5a6e96f0eb0bedf5fb497b7f5d539d47fc3a3852e2e57c5f022421c21bda"], 0x42e}}, 0x0) [ 482.837517][T14971] device lo entered promiscuous mode [ 482.859368][T14971] device lo left promiscuous mode 13:13:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x5, 0x4) 13:13:21 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x3a) 13:13:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001c000729f500000000000000077a0000", @ANYRES32=r2, @ANYBLOB="700b00000a000200aaaaaaaaaa0c001f010000006528a557b25f2034b7c8dc865f891444f263e7bddd8111f4bb3118167159ae617fa128d3071110cf80363f4b61169ed5d536d68cf2303e3425cacf7c8de5c884bab629dbd890cc26321688af85025af0a02de5d44a9bcb652736a6457461fc96673f7da981da364c45826f5a6e96f0eb0bedf5fb497b7f5d539d47fc3a3852e2e57c5f022421c21bda"], 0x42e}}, 0x0) 13:13:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) [ 483.154433][ T26] audit: type=1800 audit(1572354801.904:63): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_sys" dev="sda1" ino=17041 res=0 13:13:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:13:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) readv(r3, &(0x7f0000001700)=[{&(0x7f0000001500)=""/179, 0xb3}], 0x1) 13:13:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x5, 0x4) 13:13:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='\xae\xf1', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) 13:13:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001c000729f500000000000000077a0000", @ANYRES32=r2, @ANYBLOB="700b00000a000200aaaaaaaaaa0c001f010000006528a557b25f2034b7c8dc865f891444f263e7bddd8111f4bb3118167159ae617fa128d3071110cf80363f4b61169ed5d536d68cf2303e3425cacf7c8de5c884bab629dbd890cc26321688af85025af0a02de5d44a9bcb652736a6457461fc96673f7da981da364c45826f5a6e96f0eb0bedf5fb497b7f5d539d47fc3a3852e2e57c5f022421c21bda"], 0x42e}}, 0x0) 13:13:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:22 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 13:13:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:13:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001c000729f500000000000000077a0000", @ANYRES32=r2, @ANYBLOB="700b00000a000200aaaaaaaaaa0c001f010000006528a557b25f2034b7c8dc865f891444f263e7bddd8111f4bb3118167159ae617fa128d3071110cf80363f4b61169ed5d536d68cf2303e3425cacf7c8de5c884bab629dbd890cc26321688af85025af0a02de5d44a9bcb652736a6457461fc96673f7da981da364c45826f5a6e96f0eb0bedf5fb497b7f5d539d47fc3a3852e2e57c5f022421c21bda"], 0x42e}}, 0x0) 13:13:22 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) openat$null(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmmsg(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {0x0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}]}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x6, {{0x8, 0xd8d3, 0x2, 0x3, 0xfff, 0xfffffff8, 0xffffffff, 0xfa9}}}, 0x60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0xa05, 0x0, 0x0, {0x3, 0x400300}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000640)={@dev}, &(0x7f0000000680)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) accept4(0xffffffffffffffff, &(0x7f0000000900)=@can, &(0x7f0000000980)=0x80, 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:13:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 13:13:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000004080581ff0480ffedffdbae42e3fb000c00030084ffffff7d0a00010c0002000002f817711184a6"], 0x2c}}, 0x0) [ 484.166576][T15039] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 484.191109][T15039] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 484.366731][T15045] overlayfs: filesystem on './file0' not supported as upperdir 13:13:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:13:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) openat$null(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmmsg(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {0x0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}]}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x6, {{0x8, 0xd8d3, 0x2, 0x3, 0xfff, 0xfffffff8, 0xffffffff, 0xfa9}}}, 0x60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0xa05, 0x0, 0x0, {0x3, 0x400300}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000640)={@dev}, &(0x7f0000000680)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) accept4(0xffffffffffffffff, &(0x7f0000000900)=@can, &(0x7f0000000980)=0x80, 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:13:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 13:13:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:13:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:23 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000f7bf3e3782286c60dce8b868539fe410c29676e8188e10b02c93b22063cc3e6227b2b8315c3f4c4e08fbbf41251f41a41fb58903ec2c1f221307"], 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x1, 0x1}, 0x3c) close(r0) close(r1) 13:13:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="071f080000000000972e00c6fe76cf075768acd251e36def2300020000", 0x1d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)=0x2d9) 13:13:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:13:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) openat$null(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmmsg(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {0x0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}]}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x6, {{0x8, 0xd8d3, 0x2, 0x3, 0xfff, 0xfffffff8, 0xffffffff, 0xfa9}}}, 0x60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0xa05, 0x0, 0x0, {0x3, 0x400300}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000640)={@dev}, &(0x7f0000000680)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) accept4(0xffffffffffffffff, &(0x7f0000000900)=@can, &(0x7f0000000980)=0x80, 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:13:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000070001000b081000414900000004fcff", 0x58}], 0x1) 13:13:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000070001000b081000414900000004fcff", 0x58}], 0x1) 13:13:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:13:24 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) openat$null(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmmsg(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {0x0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}]}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000340)={0x60, 0x0, 0x6, {{0x8, 0xd8d3, 0x2, 0x3, 0xfff, 0xfffffff8, 0xffffffff, 0xfa9}}}, 0x60) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0xa05, 0x0, 0x0, {0x3, 0x400300}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000640)={@dev}, &(0x7f0000000680)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) accept4(0xffffffffffffffff, &(0x7f0000000900)=@can, &(0x7f0000000980)=0x80, 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:13:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 13:13:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000070001000b081000414900000004fcff", 0x58}], 0x1) 13:13:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000070001000b081000414900000004fcff", 0x58}], 0x1) [ 486.118336][T15101] overlayfs: conflicting lowerdir path 13:13:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) 13:13:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="ca4bb48714f051496bceec0eb1b3a225de04213568139e78037a672a9c45b76f7fe06f406dcc5a683946b11b3ae3ed6b43b74870997d61df06a7db3c52e62dd570") r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:13:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 13:13:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 13:13:25 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)="1208000000000000", 0x8}], 0x10000000000001df, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 13:13:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) 13:13:25 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x19, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 13:13:25 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000eab8ad8eb431cec46d00000000020000d47eb5c3538470db3225475db3247da87f0fd43d0db857e8fdaa051c76771264f5685c644354343d520c1fc57d710ee05ee6b9501988de6ffd7cdd9d058b635f64b64e0e5674e7e21ce973ab03736d031f7970ef5ed158f7172dc7f3b80f8d3f76cb9c6e81081ca9a8b7ccb948269d264d9972f6331c04904328008622296de6e1d523a31ae4f4b3407bbba12d21e16ec7275166b6e3cb204f9d213525e7c99bbda2d40a9b2a40c4b7ee58c4bc7fc4e9a0ddf959007b00b06c3694d437d8958cd2abbce4297ea6af27"], 0x0, 0xe1}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x16a8dc5608011a7f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44004) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x6, 0xad, 0x9, "e265aea8a8c0e170c94d7dee7a08449e0ae8c37f43c6f61c5533a758dc4a064842111ce7e8f8047b074ffaa1f410cf5de4feb2e8dd3893748c9b7877c769bd", 0x14}, 0x60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x1, [0x5, 0x8, 0x65, 0x8, 0x9, 0x3, 0x20, 0x80, 0x3, 0x6, 0x100, 0x400, 0x0, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x5, 0x0, 0x0, 0x1, 0x101, 0x2f, 0x8, 0x7ff, 0x5, 0x0, 0x20, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x2, 0x6, 0x3, 0x1, 0x6f46, 0xfff, 0x62, 0x9, 0x101, 0x7, 0x1, 0x317, 0x9, 0x1f], 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000440)={0x1, {0x77359400}, 0x1, 0x136}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x20) [ 486.638668][T15140] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 13:13:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x1000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") close(r0) [ 486.745809][T15140] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 486.866418][T15127] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 486.866518][T15127] loop5: partition table partially beyond EOD, [ 486.963684][T15127] truncated [ 486.971398][T15150] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 486.979499][T15150] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.003900][T15127] loop5: p1 size 2 extends beyond EOD, truncated 13:13:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x48}}, 0x0) 13:13:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) [ 487.072744][T15127] loop5: p4 start 1854537728 is beyond EOD, truncated [ 487.105151][T15127] loop5: p5 start 1854537728 is beyond EOD, truncated [ 487.160553][T15127] loop5: p6 start 1854537728 is beyond EOD, truncated [ 487.187016][T15127] loop5: p7 start 1854537728 is beyond EOD, truncated [ 487.207472][T15127] loop5: p8 start 1854537728 is beyond EOD, truncated [ 487.213432][T15161] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 487.223783][T15161] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.231488][T15127] loop5: p9 start 1854537728 is beyond EOD, truncated [ 487.248609][T15127] loop5: p10 start 1854537728 is beyond EOD, truncated 13:13:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) 13:13:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000020000000854105001317d895c9ff06000000000084caa4edce7e4da881e58290ce097f83a300000000e70000000000"], 0x39}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000200000000de2100000000000100020100400002000100010000000006f40100fd000005000500000000000a004872bb01000000000000001309e339be593f77070000000100170041000077c34df65d914e2086cbb90ffcad6ea9d370a48e54bd796ac57b7d4b3eaa23490778b3457c3072c6fe9cc1b5b5a9a3aa0bf1feddb53ffff177c7372591ea45c7dac9413881b60121dd391b1613177f50b892de1e87c0d2a9077cd8dfc37794d65fe3f7f31901b168206b567d847829f841b6a8cafdd90b0b181845d44777dc29ef16d518e5f6d1fc0787a3bc158de2e8bbba015c705184cde652f37dbd3396eb5b43ca8126cce56d70eda40ffcd1d398d57a5ee90ea7eba392deb6"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 487.270718][T15127] loop5: p11 start 1854537728 is beyond EOD, truncated 13:13:26 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)="1208000000000000", 0x8}], 0x10000000000001df, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 487.331631][T15127] loop5: p12 start 1854537728 is beyond EOD, truncated [ 487.356748][T15164] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 487.367865][T15127] loop5: p13 start 1854537728 is beyond EOD, truncated [ 487.402786][T15127] loop5: p14 start 1854537728 is beyond EOD, truncated [ 487.427706][T15164] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.512807][T15127] loop5: p15 start 1854537728 is beyond EOD, truncated [ 487.537310][T15127] loop5: p16 start 1854537728 is beyond EOD, truncated [ 487.556160][T15127] loop5: p17 start 1854537728 is beyond EOD, truncated [ 487.565648][T15127] loop5: p18 start 1854537728 is beyond EOD, truncated [ 487.583179][T15127] loop5: p19 start 1854537728 is beyond EOD, truncated [ 487.594199][T15127] loop5: p20 start 1854537728 is beyond EOD, truncated [ 487.614271][T15127] loop5: p21 start 1854537728 is beyond EOD, truncated [ 487.634149][T15127] loop5: p22 start 1854537728 is beyond EOD, truncated [ 487.656736][T15127] loop5: p23 start 1854537728 is beyond EOD, truncated [ 487.671491][T15127] loop5: p24 start 1854537728 is beyond EOD, truncated [ 487.681886][T15127] loop5: p25 start 1854537728 is beyond EOD, truncated [ 487.698585][T15127] loop5: p26 start 1854537728 is beyond EOD, truncated [ 487.724234][T15127] loop5: p27 start 1854537728 is beyond EOD, truncated [ 487.731756][T15127] loop5: p28 start 1854537728 is beyond EOD, truncated [ 487.741588][T15127] loop5: p29 start 1854537728 is beyond EOD, truncated [ 487.757690][T15127] loop5: p30 start 1854537728 is beyond EOD, truncated [ 487.764898][T15127] loop5: p31 start 1854537728 is beyond EOD, truncated [ 487.772859][T15127] loop5: p32 start 1854537728 is beyond EOD, truncated [ 487.779714][T15127] loop5: p33 start 1854537728 is beyond EOD, truncated [ 487.787054][T15127] loop5: p34 start 1854537728 is beyond EOD, truncated [ 487.794349][T15127] loop5: p35 start 1854537728 is beyond EOD, truncated [ 487.801738][T15127] loop5: p36 start 1854537728 is beyond EOD, truncated [ 487.808737][T15127] loop5: p37 start 1854537728 is beyond EOD, truncated [ 487.816118][T15127] loop5: p38 start 1854537728 is beyond EOD, truncated [ 487.823850][T15127] loop5: p39 start 1854537728 is beyond EOD, truncated [ 487.830732][T15127] loop5: p40 start 1854537728 is beyond EOD, truncated [ 487.837985][T15127] loop5: p41 start 1854537728 is beyond EOD, truncated [ 487.845340][T15127] loop5: p42 start 1854537728 is beyond EOD, truncated [ 487.853586][T15127] loop5: p43 start 1854537728 is beyond EOD, truncated [ 487.860451][T15127] loop5: p44 start 1854537728 is beyond EOD, truncated [ 487.867714][T15127] loop5: p45 start 1854537728 is beyond EOD, truncated [ 487.874674][T15127] loop5: p46 start 1854537728 is beyond EOD, truncated [ 487.881579][T15127] loop5: p47 start 1854537728 is beyond EOD, truncated [ 487.888461][T15127] loop5: p48 start 1854537728 is beyond EOD, truncated [ 487.895457][T15127] loop5: p49 start 1854537728 is beyond EOD, truncated [ 487.902365][T15127] loop5: p50 start 1854537728 is beyond EOD, truncated [ 487.909205][T15127] loop5: p51 start 1854537728 is beyond EOD, truncated [ 487.916150][T15127] loop5: p52 start 1854537728 is beyond EOD, truncated [ 487.923044][T15127] loop5: p53 start 1854537728 is beyond EOD, truncated [ 487.929874][T15127] loop5: p54 start 1854537728 is beyond EOD, truncated [ 487.936797][T15127] loop5: p55 start 1854537728 is beyond EOD, truncated [ 487.943688][T15127] loop5: p56 start 1854537728 is beyond EOD, truncated [ 487.950521][T15127] loop5: p57 start 1854537728 is beyond EOD, truncated [ 487.958181][T15127] loop5: p58 start 1854537728 is beyond EOD, truncated [ 487.965166][T15127] loop5: p59 start 1854537728 is beyond EOD, truncated [ 487.972186][T15127] loop5: p60 start 1854537728 is beyond EOD, truncated [ 487.979047][T15127] loop5: p61 start 1854537728 is beyond EOD, truncated [ 487.986619][T15127] loop5: p62 start 1854537728 is beyond EOD, truncated [ 487.993551][T15127] loop5: p63 start 1854537728 is beyond EOD, truncated [ 488.001149][T15127] loop5: p64 start 1854537728 is beyond EOD, truncated [ 488.007991][T15127] loop5: p65 start 1854537728 is beyond EOD, truncated [ 488.015002][T15127] loop5: p66 start 1854537728 is beyond EOD, truncated [ 488.021898][T15127] loop5: p67 start 1854537728 is beyond EOD, truncated [ 488.028738][T15127] loop5: p68 start 1854537728 is beyond EOD, truncated [ 488.035671][T15127] loop5: p69 start 1854537728 is beyond EOD, truncated [ 488.042558][T15127] loop5: p70 start 1854537728 is beyond EOD, truncated [ 488.050353][T15127] loop5: p71 start 1854537728 is beyond EOD, truncated [ 488.057282][T15127] loop5: p72 start 1854537728 is beyond EOD, truncated [ 488.064278][T15127] loop5: p73 start 1854537728 is beyond EOD, truncated [ 488.071205][T15127] loop5: p74 start 1854537728 is beyond EOD, truncated [ 488.078220][T15127] loop5: p75 start 1854537728 is beyond EOD, truncated [ 488.085109][T15127] loop5: p76 start 1854537728 is beyond EOD, truncated [ 488.092023][T15127] loop5: p77 start 1854537728 is beyond EOD, truncated [ 488.098881][T15127] loop5: p78 start 1854537728 is beyond EOD, truncated [ 488.105821][T15127] loop5: p79 start 1854537728 is beyond EOD, truncated [ 488.113281][T15127] loop5: p80 start 1854537728 is beyond EOD, truncated [ 488.120124][T15127] loop5: p81 start 1854537728 is beyond EOD, truncated [ 488.127042][T15127] loop5: p82 start 1854537728 is beyond EOD, truncated [ 488.134140][T15127] loop5: p83 start 1854537728 is beyond EOD, truncated [ 488.140980][T15127] loop5: p84 start 1854537728 is beyond EOD, truncated [ 488.147903][T15127] loop5: p85 start 1854537728 is beyond EOD, truncated [ 488.154823][T15127] loop5: p86 start 1854537728 is beyond EOD, truncated [ 488.161884][T15127] loop5: p87 start 1854537728 is beyond EOD, truncated [ 488.168736][T15127] loop5: p88 start 1854537728 is beyond EOD, truncated [ 488.175768][T15127] loop5: p89 start 1854537728 is beyond EOD, truncated [ 488.182683][T15127] loop5: p90 start 1854537728 is beyond EOD, truncated [ 488.189720][T15127] loop5: p91 start 1854537728 is beyond EOD, truncated [ 488.196688][T15127] loop5: p92 start 1854537728 is beyond EOD, truncated [ 488.203611][T15127] loop5: p93 start 1854537728 is beyond EOD, truncated [ 488.210446][T15127] loop5: p94 start 1854537728 is beyond EOD, truncated [ 488.217372][T15127] loop5: p95 start 1854537728 is beyond EOD, truncated [ 488.224280][T15127] loop5: p96 start 1854537728 is beyond EOD, truncated [ 488.231202][T15127] loop5: p97 start 1854537728 is beyond EOD, truncated [ 488.238069][T15127] loop5: p98 start 1854537728 is beyond EOD, truncated [ 488.245565][T15127] loop5: p99 start 1854537728 is beyond EOD, truncated [ 488.252510][T15127] loop5: p100 start 1854537728 is beyond EOD, truncated [ 488.259455][T15127] loop5: p101 start 1854537728 is beyond EOD, truncated [ 488.266471][T15127] loop5: p102 start 1854537728 is beyond EOD, truncated [ 488.273480][T15127] loop5: p103 start 1854537728 is beyond EOD, truncated [ 488.280667][T15127] loop5: p104 start 1854537728 is beyond EOD, truncated [ 488.287818][T15127] loop5: p105 start 1854537728 is beyond EOD, truncated [ 488.295321][T15127] loop5: p106 start 1854537728 is beyond EOD, truncated [ 488.303118][T15127] loop5: p107 start 1854537728 is beyond EOD, truncated [ 488.310069][T15127] loop5: p108 start 1854537728 is beyond EOD, truncated [ 488.317264][T15127] loop5: p109 start 1854537728 is beyond EOD, truncated [ 488.324381][T15127] loop5: p110 start 1854537728 is beyond EOD, truncated [ 488.331397][T15127] loop5: p111 start 1854537728 is beyond EOD, truncated [ 488.338337][T15127] loop5: p112 start 1854537728 is beyond EOD, truncated [ 488.347159][T15127] loop5: p113 start 1854537728 is beyond EOD, truncated [ 488.354245][T15127] loop5: p114 start 1854537728 is beyond EOD, truncated [ 488.361235][T15127] loop5: p115 start 1854537728 is beyond EOD, truncated [ 488.368189][T15127] loop5: p116 start 1854537728 is beyond EOD, truncated [ 488.375810][T15127] loop5: p117 start 1854537728 is beyond EOD, truncated [ 488.382824][T15127] loop5: p118 start 1854537728 is beyond EOD, truncated [ 488.389767][T15127] loop5: p119 start 1854537728 is beyond EOD, truncated [ 488.396877][T15127] loop5: p120 start 1854537728 is beyond EOD, truncated [ 488.403878][T15127] loop5: p121 start 1854537728 is beyond EOD, truncated [ 488.410847][T15127] loop5: p122 start 1854537728 is beyond EOD, truncated [ 488.417858][T15127] loop5: p123 start 1854537728 is beyond EOD, truncated [ 488.424871][T15127] loop5: p124 start 1854537728 is beyond EOD, truncated [ 488.431918][T15127] loop5: p125 start 1854537728 is beyond EOD, truncated [ 488.438856][T15127] loop5: p126 start 1854537728 is beyond EOD, truncated [ 488.445849][T15127] loop5: p127 start 1854537728 is beyond EOD, truncated [ 488.452948][T15127] loop5: p128 start 1854537728 is beyond EOD, truncated [ 488.459881][T15127] loop5: p129 start 1854537728 is beyond EOD, truncated [ 488.466925][T15127] loop5: p130 start 1854537728 is beyond EOD, truncated [ 488.474091][T15127] loop5: p131 start 1854537728 is beyond EOD, truncated [ 488.481085][T15127] loop5: p132 start 1854537728 is beyond EOD, truncated [ 488.488053][T15127] loop5: p133 start 1854537728 is beyond EOD, truncated [ 488.495150][T15127] loop5: p134 start 1854537728 is beyond EOD, truncated [ 488.502876][T15127] loop5: p135 start 1854537728 is beyond EOD, truncated [ 488.509810][T15127] loop5: p136 start 1854537728 is beyond EOD, truncated [ 488.517128][T15127] loop5: p137 start 1854537728 is beyond EOD, truncated [ 488.524214][T15127] loop5: p138 start 1854537728 is beyond EOD, truncated [ 488.531554][T15127] loop5: p139 start 1854537728 is beyond EOD, truncated [ 488.538601][T15127] loop5: p140 start 1854537728 is beyond EOD, truncated [ 488.545618][T15127] loop5: p141 start 1854537728 is beyond EOD, truncated [ 488.552734][T15127] loop5: p142 start 1854537728 is beyond EOD, truncated [ 488.559660][T15127] loop5: p143 start 1854537728 is beyond EOD, truncated [ 488.566678][T15127] loop5: p144 start 1854537728 is beyond EOD, truncated [ 488.573693][T15127] loop5: p145 start 1854537728 is beyond EOD, truncated [ 488.580782][T15127] loop5: p146 start 1854537728 is beyond EOD, truncated [ 488.587996][T15127] loop5: p147 start 1854537728 is beyond EOD, truncated [ 488.595107][T15127] loop5: p148 start 1854537728 is beyond EOD, truncated [ 488.602143][T15127] loop5: p149 start 1854537728 is beyond EOD, truncated [ 488.609092][T15127] loop5: p150 start 1854537728 is beyond EOD, truncated [ 488.616611][T15127] loop5: p151 start 1854537728 is beyond EOD, truncated [ 488.623832][T15127] loop5: p152 start 1854537728 is beyond EOD, truncated [ 488.630869][T15127] loop5: p153 start 1854537728 is beyond EOD, truncated [ 488.638714][T15127] loop5: p154 start 1854537728 is beyond EOD, truncated [ 488.645737][T15127] loop5: p155 start 1854537728 is beyond EOD, truncated [ 488.652932][T15127] loop5: p156 start 1854537728 is beyond EOD, truncated [ 488.659866][T15127] loop5: p157 start 1854537728 is beyond EOD, truncated [ 488.666862][T15127] loop5: p158 start 1854537728 is beyond EOD, truncated [ 488.673981][T15127] loop5: p159 start 1854537728 is beyond EOD, truncated [ 488.681113][T15127] loop5: p160 start 1854537728 is beyond EOD, truncated [ 488.688180][T15127] loop5: p161 start 1854537728 is beyond EOD, truncated [ 488.695200][T15127] loop5: p162 start 1854537728 is beyond EOD, truncated [ 488.702293][T15127] loop5: p163 start 1854537728 is beyond EOD, truncated [ 488.709237][T15127] loop5: p164 start 1854537728 is beyond EOD, truncated [ 488.716272][T15127] loop5: p165 start 1854537728 is beyond EOD, truncated [ 488.723573][T15127] loop5: p166 start 1854537728 is beyond EOD, truncated [ 488.730749][T15127] loop5: p167 start 1854537728 is beyond EOD, truncated [ 488.738018][T15127] loop5: p168 start 1854537728 is beyond EOD, truncated [ 488.745026][T15127] loop5: p169 start 1854537728 is beyond EOD, truncated [ 488.752040][T15127] loop5: p170 start 1854537728 is beyond EOD, truncated [ 488.759348][T15127] loop5: p171 start 1854537728 is beyond EOD, truncated [ 488.767000][T15127] loop5: p172 start 1854537728 is beyond EOD, truncated [ 488.774186][T15127] loop5: p173 start 1854537728 is beyond EOD, truncated [ 488.781465][T15127] loop5: p174 start 1854537728 is beyond EOD, truncated [ 488.788396][T15127] loop5: p175 start 1854537728 is beyond EOD, truncated [ 488.795401][T15127] loop5: p176 start 1854537728 is beyond EOD, truncated [ 488.802399][T15127] loop5: p177 start 1854537728 is beyond EOD, truncated [ 488.809452][T15127] loop5: p178 start 1854537728 is beyond EOD, truncated [ 488.816577][T15127] loop5: p179 start 1854537728 is beyond EOD, truncated [ 488.823579][T15127] loop5: p180 start 1854537728 is beyond EOD, truncated [ 488.830761][T15127] loop5: p181 start 1854537728 is beyond EOD, truncated [ 488.838041][T15127] loop5: p182 start 1854537728 is beyond EOD, truncated [ 488.845016][T15127] loop5: p183 start 1854537728 is beyond EOD, truncated [ 488.852113][T15127] loop5: p184 start 1854537728 is beyond EOD, truncated [ 488.859266][T15127] loop5: p185 start 1854537728 is beyond EOD, truncated [ 488.866343][T15127] loop5: p186 start 1854537728 is beyond EOD, truncated [ 488.873387][T15127] loop5: p187 start 1854537728 is beyond EOD, truncated [ 488.880306][T15127] loop5: p188 start 1854537728 is beyond EOD, truncated [ 488.887287][T15127] loop5: p189 start 1854537728 is beyond EOD, truncated [ 488.894854][T15127] loop5: p190 start 1854537728 is beyond EOD, truncated [ 488.902025][T15127] loop5: p191 start 1854537728 is beyond EOD, truncated [ 488.909051][T15127] loop5: p192 start 1854537728 is beyond EOD, truncated [ 488.916554][T15127] loop5: p193 start 1854537728 is beyond EOD, truncated [ 488.923634][T15127] loop5: p194 start 1854537728 is beyond EOD, truncated [ 488.930560][T15127] loop5: p195 start 1854537728 is beyond EOD, truncated [ 488.938066][T15127] loop5: p196 start 1854537728 is beyond EOD, truncated [ 488.945128][T15127] loop5: p197 start 1854537728 is beyond EOD, truncated [ 488.952134][T15127] loop5: p198 start 1854537728 is beyond EOD, truncated [ 488.959091][T15127] loop5: p199 start 1854537728 is beyond EOD, truncated [ 488.966094][T15127] loop5: p200 start 1854537728 is beyond EOD, truncated [ 488.973097][T15127] loop5: p201 start 1854537728 is beyond EOD, truncated [ 488.980045][T15127] loop5: p202 start 1854537728 is beyond EOD, truncated [ 488.987048][T15127] loop5: p203 start 1854537728 is beyond EOD, truncated [ 488.994036][T15127] loop5: p204 start 1854537728 is beyond EOD, truncated [ 489.001286][T15127] loop5: p205 start 1854537728 is beyond EOD, truncated [ 489.008502][T15127] loop5: p206 start 1854537728 is beyond EOD, truncated [ 489.015780][T15127] loop5: p207 start 1854537728 is beyond EOD, truncated [ 489.023399][T15127] loop5: p208 start 1854537728 is beyond EOD, truncated [ 489.030327][T15127] loop5: p209 start 1854537728 is beyond EOD, truncated [ 489.037341][T15127] loop5: p210 start 1854537728 is beyond EOD, truncated [ 489.044347][T15127] loop5: p211 start 1854537728 is beyond EOD, truncated [ 489.051637][T15127] loop5: p212 start 1854537728 is beyond EOD, truncated [ 489.058591][T15127] loop5: p213 start 1854537728 is beyond EOD, truncated [ 489.065782][T15127] loop5: p214 start 1854537728 is beyond EOD, truncated [ 489.072812][T15127] loop5: p215 start 1854537728 is beyond EOD, truncated [ 489.080013][T15127] loop5: p216 start 1854537728 is beyond EOD, truncated [ 489.087037][T15127] loop5: p217 start 1854537728 is beyond EOD, truncated [ 489.094656][T15127] loop5: p218 start 1854537728 is beyond EOD, truncated [ 489.101762][T15127] loop5: p219 start 1854537728 is beyond EOD, truncated [ 489.108716][T15127] loop5: p220 start 1854537728 is beyond EOD, truncated [ 489.115831][T15127] loop5: p221 start 1854537728 is beyond EOD, truncated [ 489.122993][T15127] loop5: p222 start 1854537728 is beyond EOD, truncated [ 489.129924][T15127] loop5: p223 start 1854537728 is beyond EOD, truncated [ 489.136924][T15127] loop5: p224 start 1854537728 is beyond EOD, truncated [ 489.143948][T15127] loop5: p225 start 1854537728 is beyond EOD, truncated [ 489.151961][T15127] loop5: p226 start 1854537728 is beyond EOD, truncated [ 489.158901][T15127] loop5: p227 start 1854537728 is beyond EOD, truncated [ 489.166011][T15127] loop5: p228 start 1854537728 is beyond EOD, truncated [ 489.173499][T15127] loop5: p229 start 1854537728 is beyond EOD, truncated [ 489.180421][T15127] loop5: p230 start 1854537728 is beyond EOD, truncated [ 489.187402][T15127] loop5: p231 start 1854537728 is beyond EOD, truncated [ 489.194406][T15127] loop5: p232 start 1854537728 is beyond EOD, truncated [ 489.201390][T15127] loop5: p233 start 1854537728 is beyond EOD, truncated [ 489.208333][T15127] loop5: p234 start 1854537728 is beyond EOD, truncated [ 489.216867][T15127] loop5: p235 start 1854537728 is beyond EOD, truncated [ 489.223858][T15127] loop5: p236 start 1854537728 is beyond EOD, truncated [ 489.230886][T15127] loop5: p237 start 1854537728 is beyond EOD, truncated [ 489.238332][T15127] loop5: p238 start 1854537728 is beyond EOD, truncated [ 489.245935][T15127] loop5: p239 start 1854537728 is beyond EOD, truncated [ 489.253043][T15127] loop5: p240 start 1854537728 is beyond EOD, truncated [ 489.260249][T15127] loop5: p241 start 1854537728 is beyond EOD, truncated [ 489.267484][T15127] loop5: p242 start 1854537728 is beyond EOD, truncated [ 489.275946][T15127] loop5: p243 start 1854537728 is beyond EOD, truncated [ 489.284130][T15127] loop5: p244 start 1854537728 is beyond EOD, truncated [ 489.291181][T15127] loop5: p245 start 1854537728 is beyond EOD, truncated [ 489.298586][T15127] loop5: p246 start 1854537728 is beyond EOD, truncated [ 489.305605][T15127] loop5: p247 start 1854537728 is beyond EOD, truncated [ 489.312671][T15127] loop5: p248 start 1854537728 is beyond EOD, truncated [ 489.319632][T15127] loop5: p249 start 1854537728 is beyond EOD, truncated [ 489.327228][T15127] loop5: p250 start 1854537728 is beyond EOD, truncated [ 489.334355][T15127] loop5: p251 start 1854537728 is beyond EOD, truncated [ 489.341464][T15127] loop5: p252 start 1854537728 is beyond EOD, truncated [ 489.348578][T15127] loop5: p253 start 1854537728 is beyond EOD, truncated [ 489.355577][T15127] loop5: p254 start 1854537728 is beyond EOD, truncated [ 489.362598][T15127] loop5: p255 start 1854537728 is beyond EOD, truncated 13:13:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0006000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) 13:13:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800040044000000120012000c0001007665746800000000182d38d4e4e4f78af39bdefb82bfdab89422a2dee22c8809be14ec01000a00010000000000f074449edf9d5bc254f1ae7f7da85719441d96ebdabfa2c63d0f13ebab948050e26663253e99e12111497c92b7728bdc8b996425c2a051b5fb1fb5a880a608816cdb3380974ddaf967d7a1a6b87386350cede903f03e543aebdc5d1ceca06d5d01838180ee3c69119380eb68efd2b41cf2a8ffd47d119414a800e546784fda702d1d9c352ef08feee5e9657b6da1999640065eb02260ad1f83eb6882f2a67f7611c60f1b80cea73cb07c0d3bce9b0000000000000072a3189ce341fbcdc6a51ee8b142a9f027a3c425f201d72467cc6c4b1db87760cb214c80ad5801b085605b08eaca4aedaf653c5898b8600a406aef9740944cd1d782e895de4589cf5ddca0c2dbb70e4f4b401bac365432fb4667b2a51dfdc4dcbfb01e04d273e20cd3f8882d17060fcd8ed45f50f3b8dd25dc84b628183b4f109a83f7cfc7d16bfca283206d655be3615d5363189ea89c5cad11f9e4278df3a724519346fa0c39fc2bf5490faf10741db5e74698092dd2432149691a5625ad3deac899da303f8b11d41d05bf3da841b52648b045a97f26dab1703f4eda4c6a5f8eb847549d00f90d07d41225b30f922f2b52daf92f188edfdcb5be38e1c34400839e4a14f1e747547990dab5102e9e5587a5315ec16c25661fd88e717d95293d6cbd02f86bcc955f14c5fe19aa2cd56349bb90e3791ff269be83ef4e62ed591e7451fc8561dd52d06822d668eb66154b481042c16d10cc03a9046bbc8bf0bacd38ed4be381db118aa87fff42db469213ae97b7f8793a95df612c25124a5dd82952bc0ac03603f63d3ca3239d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 13:13:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000020000000854105001317d895c9ff06000000000084caa4edce7e4da881e58290ce097f83a300000000e70000000000"], 0x39}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 13:13:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000eab8ad8eb431cec46d00000000020000d47eb5c3538470db3225475db3247da87f0fd43d0db857e8fdaa051c76771264f5685c644354343d520c1fc57d710ee05ee6b9501988de6ffd7cdd9d058b635f64b64e0e5674e7e21ce973ab03736d031f7970ef5ed158f7172dc7f3b80f8d3f76cb9c6e81081ca9a8b7ccb948269d264d9972f6331c04904328008622296de6e1d523a31ae4f4b3407bbba12d21e16ec7275166b6e3cb204f9d213525e7c99bbda2d40a9b2a40c4b7ee58c4bc7fc4e9a0ddf959007b00b06c3694d437d8958cd2abbce4297ea6af27"], 0x0, 0xe1}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x16a8dc5608011a7f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44004) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x6, 0xad, 0x9, "e265aea8a8c0e170c94d7dee7a08449e0ae8c37f43c6f61c5533a758dc4a064842111ce7e8f8047b074ffaa1f410cf5de4feb2e8dd3893748c9b7877c769bd", 0x14}, 0x60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x1, [0x5, 0x8, 0x65, 0x8, 0x9, 0x3, 0x20, 0x80, 0x3, 0x6, 0x100, 0x400, 0x0, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x5, 0x0, 0x0, 0x1, 0x101, 0x2f, 0x8, 0x7ff, 0x5, 0x0, 0x20, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x2, 0x6, 0x3, 0x1, 0x6f46, 0xfff, 0x62, 0x9, 0x101, 0x7, 0x1, 0x317, 0x9, 0x1f], 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000440)={0x1, {0x77359400}, 0x1, 0x136}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x20) 13:13:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 13:13:28 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)="1208000000000000", 0x8}], 0x10000000000001df, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 489.492653][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.502090][T15191] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.530910][T15189] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 13:13:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f00000017c0)) [ 489.561835][T15189] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 13:13:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000020000000854105001317d895c9ff06000000000084caa4edce7e4da881e58290ce097f83a300000000e70000000000"], 0x39}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 13:13:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) [ 489.820206][T15193] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 489.829244][T15193] loop5: partition table partially beyond EOD, 13:13:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni-avx2,nhpoly1305-generic)\x00'}, 0x58) close(r0) 13:13:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000020000000854105001317d895c9ff06000000000084caa4edce7e4da881e58290ce097f83a300000000e70000000000"], 0x39}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 489.997097][T15193] truncated [ 490.003513][T15193] loop5: p1 size 2 extends beyond EOD, truncated 13:13:28 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)="1208000000000000", 0x8}], 0x10000000000001df, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 490.082002][T15193] loop5: p4 start 1854537728 is beyond EOD, truncated [ 490.106839][T15193] loop5: p5 start 1854537728 is beyond EOD, truncated [ 490.131291][T15193] loop5: p6 start 1854537728 is beyond EOD, truncated [ 490.171327][T15193] loop5: p7 start 1854537728 is beyond EOD, truncated 13:13:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 13:13:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000eab8ad8eb431cec46d00000000020000d47eb5c3538470db3225475db3247da87f0fd43d0db857e8fdaa051c76771264f5685c644354343d520c1fc57d710ee05ee6b9501988de6ffd7cdd9d058b635f64b64e0e5674e7e21ce973ab03736d031f7970ef5ed158f7172dc7f3b80f8d3f76cb9c6e81081ca9a8b7ccb948269d264d9972f6331c04904328008622296de6e1d523a31ae4f4b3407bbba12d21e16ec7275166b6e3cb204f9d213525e7c99bbda2d40a9b2a40c4b7ee58c4bc7fc4e9a0ddf959007b00b06c3694d437d8958cd2abbce4297ea6af27"], 0x0, 0xe1}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x16a8dc5608011a7f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44004) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x6, 0xad, 0x9, "e265aea8a8c0e170c94d7dee7a08449e0ae8c37f43c6f61c5533a758dc4a064842111ce7e8f8047b074ffaa1f410cf5de4feb2e8dd3893748c9b7877c769bd", 0x14}, 0x60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x1, [0x5, 0x8, 0x65, 0x8, 0x9, 0x3, 0x20, 0x80, 0x3, 0x6, 0x100, 0x400, 0x0, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x5, 0x0, 0x0, 0x1, 0x101, 0x2f, 0x8, 0x7ff, 0x5, 0x0, 0x20, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x2, 0x6, 0x3, 0x1, 0x6f46, 0xfff, 0x62, 0x9, 0x101, 0x7, 0x1, 0x317, 0x9, 0x1f], 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000440)={0x1, {0x77359400}, 0x1, 0x136}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x20) [ 490.192544][T15193] loop5: p8 start 1854537728 is beyond EOD, truncated [ 490.212458][T15193] loop5: p9 start 1854537728 is beyond EOD, truncated [ 490.218793][T15210] overlayfs: failed to resolve 'file0': -2 [ 490.224361][T15193] loop5: p10 start 1854537728 is beyond EOD, truncated 13:13:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) [ 490.346720][T15193] loop5: p11 start 1854537728 is beyond EOD, truncated 13:13:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni-avx2,nhpoly1305-generic)\x00'}, 0x58) close(r0) 13:13:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) [ 490.417797][T15193] loop5: p12 start 1854537728 is beyond EOD, truncated [ 490.503618][T15193] loop5: p13 start 1854537728 is beyond EOD, truncated [ 490.521723][T15193] loop5: p14 start 1854537728 is beyond EOD, truncated [ 490.570286][T15193] loop5: p15 start 1854537728 is beyond EOD, truncated [ 490.636219][T15193] loop5: p16 start 1854537728 is beyond EOD, truncated [ 490.647289][T15193] loop5: p17 start 1854537728 is beyond EOD, truncated [ 490.657734][T15193] loop5: p18 start 1854537728 is beyond EOD, truncated [ 490.665086][T15193] loop5: p19 start 1854537728 is beyond EOD, truncated [ 490.672381][T15193] loop5: p20 start 1854537728 is beyond EOD, truncated [ 490.679457][T15193] loop5: p21 start 1854537728 is beyond EOD, truncated [ 490.687025][T15193] loop5: p22 start 1854537728 is beyond EOD, truncated [ 490.704570][T15193] loop5: p23 start 1854537728 is beyond EOD, truncated [ 490.729290][T15193] loop5: p24 start 1854537728 is beyond EOD, truncated [ 490.745716][T15193] loop5: p25 start 1854537728 is beyond EOD, truncated [ 490.765688][T15193] loop5: p26 start 1854537728 is beyond EOD, truncated [ 490.781302][T15193] loop5: p27 start 1854537728 is beyond EOD, truncated [ 490.791646][T15193] loop5: p28 start 1854537728 is beyond EOD, truncated [ 490.792006][T15247] overlayfs: failed to resolve 'file0': -2 [ 490.798694][T15193] loop5: p29 start 1854537728 is beyond EOD, truncated [ 490.812183][T15193] loop5: p30 start 1854537728 is beyond EOD, truncated [ 490.819203][T15193] loop5: p31 start 1854537728 is beyond EOD, truncated [ 490.826263][T15193] loop5: p32 start 1854537728 is beyond EOD, truncated [ 490.850067][T15193] loop5: p33 start 1854537728 is beyond EOD, truncated [ 490.874167][T15193] loop5: p34 start 1854537728 is beyond EOD, truncated [ 490.897404][T15193] loop5: p35 start 1854537728 is beyond EOD, truncated [ 490.914914][T15193] loop5: p36 start 1854537728 is beyond EOD, truncated [ 490.922876][T15193] loop5: p37 start 1854537728 is beyond EOD, truncated [ 490.931837][T15193] loop5: p38 start 1854537728 is beyond EOD, truncated [ 490.938845][T15193] loop5: p39 start 1854537728 is beyond EOD, truncated [ 490.948106][T15193] loop5: p40 start 1854537728 is beyond EOD, truncated [ 490.955429][T15193] loop5: p41 start 1854537728 is beyond EOD, truncated [ 490.963938][T15193] loop5: p42 start 1854537728 is beyond EOD, truncated [ 490.974832][T15193] loop5: p43 start 1854537728 is beyond EOD, truncated [ 490.982837][T15193] loop5: p44 start 1854537728 is beyond EOD, truncated [ 490.989875][T15193] loop5: p45 start 1854537728 is beyond EOD, truncated [ 490.997226][T15193] loop5: p46 start 1854537728 is beyond EOD, truncated [ 491.004447][T15193] loop5: p47 start 1854537728 is beyond EOD, truncated [ 491.012089][T15193] loop5: p48 start 1854537728 is beyond EOD, truncated [ 491.019213][T15193] loop5: p49 start 1854537728 is beyond EOD, truncated [ 491.019226][T15193] loop5: p50 start 1854537728 is beyond EOD, truncated [ 491.019237][T15193] loop5: p51 start 1854537728 is beyond EOD, truncated [ 491.019255][T15193] loop5: p52 start 1854537728 is beyond EOD, truncated [ 491.019265][T15193] loop5: p53 start 1854537728 is beyond EOD, truncated [ 491.019275][T15193] loop5: p54 start 1854537728 is beyond EOD, truncated [ 491.062776][T15193] loop5: p55 start 1854537728 is beyond EOD, truncated [ 491.069728][T15193] loop5: p56 start 1854537728 is beyond EOD, truncated [ 491.078485][T15193] loop5: p57 start 1854537728 is beyond EOD, truncated [ 491.085467][T15193] loop5: p58 start 1854537728 is beyond EOD, truncated [ 491.094375][T15193] loop5: p59 start 1854537728 is beyond EOD, truncated [ 491.105169][T15193] loop5: p60 start 1854537728 is beyond EOD, truncated [ 491.112980][T15193] loop5: p61 start 1854537728 is beyond EOD, truncated [ 491.119843][T15193] loop5: p62 start 1854537728 is beyond EOD, truncated [ 491.126802][T15193] loop5: p63 start 1854537728 is beyond EOD, truncated [ 491.133968][T15193] loop5: p64 start 1854537728 is beyond EOD, truncated [ 491.141221][T15193] loop5: p65 start 1854537728 is beyond EOD, truncated [ 491.148183][T15193] loop5: p66 start 1854537728 is beyond EOD, truncated [ 491.156056][T15193] loop5: p67 start 1854537728 is beyond EOD, truncated [ 491.162976][T15193] loop5: p68 start 1854537728 is beyond EOD, truncated [ 491.169840][T15193] loop5: p69 start 1854537728 is beyond EOD, truncated [ 491.176822][T15193] loop5: p70 start 1854537728 is beyond EOD, truncated [ 491.183766][T15193] loop5: p71 start 1854537728 is beyond EOD, truncated [ 491.190612][T15193] loop5: p72 start 1854537728 is beyond EOD, truncated [ 491.197615][T15193] loop5: p73 start 1854537728 is beyond EOD, truncated [ 491.204521][T15193] loop5: p74 start 1854537728 is beyond EOD, truncated [ 491.211433][T15193] loop5: p75 start 1854537728 is beyond EOD, truncated [ 491.218379][T15193] loop5: p76 start 1854537728 is beyond EOD, truncated [ 491.225277][T15193] loop5: p77 start 1854537728 is beyond EOD, truncated [ 491.232199][T15193] loop5: p78 start 1854537728 is beyond EOD, truncated [ 491.240108][T15193] loop5: p79 start 1854537728 is beyond EOD, truncated [ 491.247294][T15193] loop5: p80 start 1854537728 is beyond EOD, truncated [ 491.254186][T15193] loop5: p81 start 1854537728 is beyond EOD, truncated [ 491.261197][T15193] loop5: p82 start 1854537728 is beyond EOD, truncated [ 491.268281][T15193] loop5: p83 start 1854537728 is beyond EOD, truncated [ 491.275201][T15193] loop5: p84 start 1854537728 is beyond EOD, truncated [ 491.282460][T15193] loop5: p85 start 1854537728 is beyond EOD, truncated [ 491.289309][T15193] loop5: p86 start 1854537728 is beyond EOD, truncated [ 491.296665][T15193] loop5: p87 start 1854537728 is beyond EOD, truncated [ 491.303860][T15193] loop5: p88 start 1854537728 is beyond EOD, truncated [ 491.310717][T15193] loop5: p89 start 1854537728 is beyond EOD, truncated [ 491.317612][T15193] loop5: p90 start 1854537728 is beyond EOD, truncated [ 491.324519][T15193] loop5: p91 start 1854537728 is beyond EOD, truncated [ 491.331454][T15193] loop5: p92 start 1854537728 is beyond EOD, truncated [ 491.338298][T15193] loop5: p93 start 1854537728 is beyond EOD, truncated [ 491.345208][T15193] loop5: p94 start 1854537728 is beyond EOD, truncated [ 491.352212][T15193] loop5: p95 start 1854537728 is beyond EOD, truncated [ 491.359062][T15193] loop5: p96 start 1854537728 is beyond EOD, truncated [ 491.365958][T15193] loop5: p97 start 1854537728 is beyond EOD, truncated [ 491.373297][T15193] loop5: p98 start 1854537728 is beyond EOD, truncated [ 491.380131][T15193] loop5: p99 start 1854537728 is beyond EOD, truncated [ 491.387018][T15193] loop5: p100 start 1854537728 is beyond EOD, truncated [ 491.394080][T15193] loop5: p101 start 1854537728 is beyond EOD, truncated [ 491.402154][T15193] loop5: p102 start 1854537728 is beyond EOD, truncated [ 491.409095][T15193] loop5: p103 start 1854537728 is beyond EOD, truncated [ 491.416196][T15193] loop5: p104 start 1854537728 is beyond EOD, truncated [ 491.423246][T15193] loop5: p105 start 1854537728 is beyond EOD, truncated [ 491.430323][T15193] loop5: p106 start 1854537728 is beyond EOD, truncated [ 491.437345][T15193] loop5: p107 start 1854537728 is beyond EOD, truncated [ 491.444361][T15193] loop5: p108 start 1854537728 is beyond EOD, truncated [ 491.451586][T15193] loop5: p109 start 1854537728 is beyond EOD, truncated [ 491.458795][T15193] loop5: p110 start 1854537728 is beyond EOD, truncated [ 491.465863][T15193] loop5: p111 start 1854537728 is beyond EOD, truncated [ 491.473085][T15193] loop5: p112 start 1854537728 is beyond EOD, truncated [ 491.480865][T15193] loop5: p113 start 1854537728 is beyond EOD, truncated [ 491.488100][T15193] loop5: p114 start 1854537728 is beyond EOD, truncated [ 491.495098][T15193] loop5: p115 start 1854537728 is beyond EOD, truncated [ 491.502256][T15193] loop5: p116 start 1854537728 is beyond EOD, truncated [ 491.509293][T15193] loop5: p117 start 1854537728 is beyond EOD, truncated [ 491.516820][T15193] loop5: p118 start 1854537728 is beyond EOD, truncated [ 491.524091][T15193] loop5: p119 start 1854537728 is beyond EOD, truncated [ 491.531210][T15193] loop5: p120 start 1854537728 is beyond EOD, truncated [ 491.538633][T15193] loop5: p121 start 1854537728 is beyond EOD, truncated [ 491.545627][T15193] loop5: p122 start 1854537728 is beyond EOD, truncated [ 491.552630][T15193] loop5: p123 start 1854537728 is beyond EOD, truncated [ 491.559660][T15193] loop5: p124 start 1854537728 is beyond EOD, truncated [ 491.566748][T15193] loop5: p125 start 1854537728 is beyond EOD, truncated [ 491.573752][T15193] loop5: p126 start 1854537728 is beyond EOD, truncated [ 491.580698][T15193] loop5: p127 start 1854537728 is beyond EOD, truncated [ 491.587688][T15193] loop5: p128 start 1854537728 is beyond EOD, truncated [ 491.594698][T15193] loop5: p129 start 1854537728 is beyond EOD, truncated [ 491.602343][T15193] loop5: p130 start 1854537728 is beyond EOD, truncated [ 491.609301][T15193] loop5: p131 start 1854537728 is beyond EOD, truncated [ 491.616360][T15193] loop5: p132 start 1854537728 is beyond EOD, truncated [ 491.623547][T15193] loop5: p133 start 1854537728 is beyond EOD, truncated [ 491.630939][T15193] loop5: p134 start 1854537728 is beyond EOD, truncated [ 491.637981][T15193] loop5: p135 start 1854537728 is beyond EOD, truncated [ 491.645152][T15193] loop5: p136 start 1854537728 is beyond EOD, truncated [ 491.653326][T15193] loop5: p137 start 1854537728 is beyond EOD, truncated [ 491.660351][T15193] loop5: p138 start 1854537728 is beyond EOD, truncated [ 491.667638][T15193] loop5: p139 start 1854537728 is beyond EOD, truncated [ 491.674778][T15193] loop5: p140 start 1854537728 is beyond EOD, truncated [ 491.681886][T15193] loop5: p141 start 1854537728 is beyond EOD, truncated [ 491.688836][T15193] loop5: p142 start 1854537728 is beyond EOD, truncated [ 491.695817][T15193] loop5: p143 start 1854537728 is beyond EOD, truncated [ 491.702814][T15193] loop5: p144 start 1854537728 is beyond EOD, truncated [ 491.710125][T15193] loop5: p145 start 1854537728 is beyond EOD, truncated [ 491.717114][T15193] loop5: p146 start 1854537728 is beyond EOD, truncated [ 491.724195][T15193] loop5: p147 start 1854537728 is beyond EOD, truncated [ 491.732508][T15193] loop5: p148 start 1854537728 is beyond EOD, truncated [ 491.739463][T15193] loop5: p149 start 1854537728 is beyond EOD, truncated [ 491.746458][T15193] loop5: p150 start 1854537728 is beyond EOD, truncated [ 491.753564][T15193] loop5: p151 start 1854537728 is beyond EOD, truncated [ 491.760541][T15193] loop5: p152 start 1854537728 is beyond EOD, truncated [ 491.767552][T15193] loop5: p153 start 1854537728 is beyond EOD, truncated [ 491.774531][T15193] loop5: p154 start 1854537728 is beyond EOD, truncated [ 491.781699][T15193] loop5: p155 start 1854537728 is beyond EOD, truncated [ 491.788721][T15193] loop5: p156 start 1854537728 is beyond EOD, truncated [ 491.795704][T15193] loop5: p157 start 1854537728 is beyond EOD, truncated [ 491.802696][T15193] loop5: p158 start 1854537728 is beyond EOD, truncated [ 491.812889][T15193] loop5: p159 start 1854537728 is beyond EOD, truncated [ 491.820219][T15193] loop5: p160 start 1854537728 is beyond EOD, truncated [ 491.827208][T15193] loop5: p161 start 1854537728 is beyond EOD, truncated [ 491.834242][T15193] loop5: p162 start 1854537728 is beyond EOD, truncated [ 491.841736][T15193] loop5: p163 start 1854537728 is beyond EOD, truncated [ 491.848696][T15193] loop5: p164 start 1854537728 is beyond EOD, truncated [ 491.855672][T15193] loop5: p165 start 1854537728 is beyond EOD, truncated [ 491.862658][T15193] loop5: p166 start 1854537728 is beyond EOD, truncated [ 491.869779][T15193] loop5: p167 start 1854537728 is beyond EOD, truncated [ 491.876767][T15193] loop5: p168 start 1854537728 is beyond EOD, truncated [ 491.883754][T15193] loop5: p169 start 1854537728 is beyond EOD, truncated [ 491.890785][T15193] loop5: p170 start 1854537728 is beyond EOD, truncated [ 491.898936][T15193] loop5: p171 start 1854537728 is beyond EOD, truncated [ 491.905918][T15193] loop5: p172 start 1854537728 is beyond EOD, truncated [ 491.912922][T15193] loop5: p173 start 1854537728 is beyond EOD, truncated [ 491.920050][T15193] loop5: p174 start 1854537728 is beyond EOD, truncated [ 491.927720][T15193] loop5: p175 start 1854537728 is beyond EOD, truncated [ 491.934733][T15193] loop5: p176 start 1854537728 is beyond EOD, truncated [ 491.941798][T15193] loop5: p177 start 1854537728 is beyond EOD, truncated [ 491.948910][T15193] loop5: p178 start 1854537728 is beyond EOD, truncated [ 491.955979][T15193] loop5: p179 start 1854537728 is beyond EOD, truncated [ 491.962972][T15193] loop5: p180 start 1854537728 is beyond EOD, truncated [ 491.969910][T15193] loop5: p181 start 1854537728 is beyond EOD, truncated [ 491.977658][T15193] loop5: p182 start 1854537728 is beyond EOD, truncated [ 491.984652][T15193] loop5: p183 start 1854537728 is beyond EOD, truncated [ 491.991658][T15193] loop5: p184 start 1854537728 is beyond EOD, truncated [ 491.998596][T15193] loop5: p185 start 1854537728 is beyond EOD, truncated [ 492.005587][T15193] loop5: p186 start 1854537728 is beyond EOD, truncated [ 492.012696][T15193] loop5: p187 start 1854537728 is beyond EOD, truncated [ 492.019807][T15193] loop5: p188 start 1854537728 is beyond EOD, truncated [ 492.027046][T15193] loop5: p189 start 1854537728 is beyond EOD, truncated [ 492.038629][T15193] loop5: p190 start 1854537728 is beyond EOD, truncated [ 492.045606][T15193] loop5: p191 start 1854537728 is beyond EOD, truncated [ 492.052960][T15193] loop5: p192 start 1854537728 is beyond EOD, truncated [ 492.059906][T15193] loop5: p193 start 1854537728 is beyond EOD, truncated [ 492.066910][T15193] loop5: p194 start 1854537728 is beyond EOD, truncated [ 492.074097][T15193] loop5: p195 start 1854537728 is beyond EOD, truncated [ 492.081537][T15193] loop5: p196 start 1854537728 is beyond EOD, truncated [ 492.088492][T15193] loop5: p197 start 1854537728 is beyond EOD, truncated [ 492.096013][T15193] loop5: p198 start 1854537728 is beyond EOD, truncated [ 492.103036][T15193] loop5: p199 start 1854537728 is beyond EOD, truncated [ 492.110254][T15193] loop5: p200 start 1854537728 is beyond EOD, truncated [ 492.117268][T15193] loop5: p201 start 1854537728 is beyond EOD, truncated [ 492.124274][T15193] loop5: p202 start 1854537728 is beyond EOD, truncated [ 492.131278][T15193] loop5: p203 start 1854537728 is beyond EOD, truncated [ 492.138675][T15193] loop5: p204 start 1854537728 is beyond EOD, truncated [ 492.145701][T15193] loop5: p205 start 1854537728 is beyond EOD, truncated [ 492.152704][T15193] loop5: p206 start 1854537728 is beyond EOD, truncated [ 492.159725][T15193] loop5: p207 start 1854537728 is beyond EOD, truncated [ 492.167026][T15193] loop5: p208 start 1854537728 is beyond EOD, truncated [ 492.174114][T15193] loop5: p209 start 1854537728 is beyond EOD, truncated [ 492.181095][T15193] loop5: p210 start 1854537728 is beyond EOD, truncated [ 492.188761][T15193] loop5: p211 start 1854537728 is beyond EOD, truncated [ 492.195847][T15193] loop5: p212 start 1854537728 is beyond EOD, truncated [ 492.202831][T15193] loop5: p213 start 1854537728 is beyond EOD, truncated [ 492.209767][T15193] loop5: p214 start 1854537728 is beyond EOD, truncated [ 492.216923][T15193] loop5: p215 start 1854537728 is beyond EOD, truncated [ 492.223921][T15193] loop5: p216 start 1854537728 is beyond EOD, truncated [ 492.230853][T15193] loop5: p217 start 1854537728 is beyond EOD, truncated [ 492.237865][T15193] loop5: p218 start 1854537728 is beyond EOD, truncated [ 492.245107][T15193] loop5: p219 start 1854537728 is beyond EOD, truncated [ 492.252098][T15193] loop5: p220 start 1854537728 is beyond EOD, truncated [ 492.259034][T15193] loop5: p221 start 1854537728 is beyond EOD, truncated [ 492.266028][T15193] loop5: p222 start 1854537728 is beyond EOD, truncated [ 492.274203][T15193] loop5: p223 start 1854537728 is beyond EOD, truncated [ 492.281196][T15193] loop5: p224 start 1854537728 is beyond EOD, truncated [ 492.288324][T15193] loop5: p225 start 1854537728 is beyond EOD, truncated [ 492.295904][T15193] loop5: p226 start 1854537728 is beyond EOD, truncated [ 492.303535][T15193] loop5: p227 start 1854537728 is beyond EOD, truncated [ 492.310510][T15193] loop5: p228 start 1854537728 is beyond EOD, truncated [ 492.317503][T15193] loop5: p229 start 1854537728 is beyond EOD, truncated [ 492.324499][T15193] loop5: p230 start 1854537728 is beyond EOD, truncated [ 492.331500][T15193] loop5: p231 start 1854537728 is beyond EOD, truncated [ 492.338467][T15193] loop5: p232 start 1854537728 is beyond EOD, truncated [ 492.345480][T15193] loop5: p233 start 1854537728 is beyond EOD, truncated [ 492.352576][T15193] loop5: p234 start 1854537728 is beyond EOD, truncated [ 492.359522][T15193] loop5: p235 start 1854537728 is beyond EOD, truncated [ 492.366504][T15193] loop5: p236 start 1854537728 is beyond EOD, truncated [ 492.373776][T15193] loop5: p237 start 1854537728 is beyond EOD, truncated [ 492.380721][T15193] loop5: p238 start 1854537728 is beyond EOD, truncated [ 492.387771][T15193] loop5: p239 start 1854537728 is beyond EOD, truncated [ 492.394772][T15193] loop5: p240 start 1854537728 is beyond EOD, truncated [ 492.401858][T15193] loop5: p241 start 1854537728 is beyond EOD, truncated [ 492.408811][T15193] loop5: p242 start 1854537728 is beyond EOD, truncated [ 492.415788][T15193] loop5: p243 start 1854537728 is beyond EOD, truncated [ 492.422883][T15193] loop5: p244 start 1854537728 is beyond EOD, truncated [ 492.430098][T15193] loop5: p245 start 1854537728 is beyond EOD, truncated [ 492.437296][T15193] loop5: p246 start 1854537728 is beyond EOD, truncated [ 492.444476][T15193] loop5: p247 start 1854537728 is beyond EOD, truncated [ 492.451553][T15193] loop5: p248 start 1854537728 is beyond EOD, truncated [ 492.458827][T15193] loop5: p249 start 1854537728 is beyond EOD, truncated [ 492.465826][T15193] loop5: p250 start 1854537728 is beyond EOD, truncated [ 492.472831][T15193] loop5: p251 start 1854537728 is beyond EOD, truncated [ 492.479762][T15193] loop5: p252 start 1854537728 is beyond EOD, truncated [ 492.487492][T15193] loop5: p253 start 1854537728 is beyond EOD, truncated [ 492.494565][T15193] loop5: p254 start 1854537728 is beyond EOD, truncated [ 492.501557][T15193] loop5: p255 start 1854537728 is beyond EOD, truncated 13:13:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 13:13:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni-avx2,nhpoly1305-generic)\x00'}, 0x58) close(r0) 13:13:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)) 13:13:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) 13:13:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) 13:13:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000eab8ad8eb431cec46d00000000020000d47eb5c3538470db3225475db3247da87f0fd43d0db857e8fdaa051c76771264f5685c644354343d520c1fc57d710ee05ee6b9501988de6ffd7cdd9d058b635f64b64e0e5674e7e21ce973ab03736d031f7970ef5ed158f7172dc7f3b80f8d3f76cb9c6e81081ca9a8b7ccb948269d264d9972f6331c04904328008622296de6e1d523a31ae4f4b3407bbba12d21e16ec7275166b6e3cb204f9d213525e7c99bbda2d40a9b2a40c4b7ee58c4bc7fc4e9a0ddf959007b00b06c3694d437d8958cd2abbce4297ea6af27"], 0x0, 0xe1}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x16a8dc5608011a7f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44004) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x6, 0xad, 0x9, "e265aea8a8c0e170c94d7dee7a08449e0ae8c37f43c6f61c5533a758dc4a064842111ce7e8f8047b074ffaa1f410cf5de4feb2e8dd3893748c9b7877c769bd", 0x14}, 0x60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x1, [0x5, 0x8, 0x65, 0x8, 0x9, 0x3, 0x20, 0x80, 0x3, 0x6, 0x100, 0x400, 0x0, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x5, 0x0, 0x0, 0x1, 0x101, 0x2f, 0x8, 0x7ff, 0x5, 0x0, 0x20, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x2, 0x6, 0x3, 0x1, 0x6f46, 0xfff, 0x62, 0x9, 0x101, 0x7, 0x1, 0x317, 0x9, 0x1f], 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000440)={0x1, {0x77359400}, 0x1, 0x136}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x20) 13:13:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni-avx2,nhpoly1305-generic)\x00'}, 0x58) close(r0) 13:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1b6) setresuid(0x0, r2, 0xee00) setresuid(0x0, 0xee00, 0xee00) 13:13:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0xb, @raw_data="43553038bebdf82c50f2ca42f818ea55c4ccafdcf88ad8112cf4f484d34c3ae1b3d6a98496804cf9482f28dde89301a145eb6db07837739a43a80dbf275afbf0133a8ae38a5c93024190cc759e43bf2b904b0d15ccb74d7ee6b121bdcd88ab3babc15d07c296424360407cfd87117fc0df01a2796f74bd631144442729f1976316b8cac337753e26029657fcfb90490a1f5a92d37532bd522652415fee26a6b0dfabbeab7b09681ec2e8d6eab393c3d278dc2e4efb5e9dfd0bfdcbea3e071eb250611f3c6c7fada4"}) 13:13:31 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000001200)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) [ 492.867599][T15269] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 492.867704][T15269] loop5: partition table partially beyond EOD, [ 492.964911][T15269] truncated [ 492.969897][T15269] loop5: p1 size 2 extends beyond EOD, truncated [ 493.013033][T15269] loop5: p4 start 1854537728 is beyond EOD, truncated [ 493.019954][T15269] loop5: p5 start 1854537728 is beyond EOD, truncated [ 493.052144][T15269] loop5: p6 start 1854537728 is beyond EOD, truncated [ 493.059550][T15269] loop5: p7 start 1854537728 is beyond EOD, truncated [ 493.121861][T15269] loop5: p8 start 1854537728 is beyond EOD, truncated 13:13:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0xb, @raw_data="43553038bebdf82c50f2ca42f818ea55c4ccafdcf88ad8112cf4f484d34c3ae1b3d6a98496804cf9482f28dde89301a145eb6db07837739a43a80dbf275afbf0133a8ae38a5c93024190cc759e43bf2b904b0d15ccb74d7ee6b121bdcd88ab3babc15d07c296424360407cfd87117fc0df01a2796f74bd631144442729f1976316b8cac337753e26029657fcfb90490a1f5a92d37532bd522652415fee26a6b0dfabbeab7b09681ec2e8d6eab393c3d278dc2e4efb5e9dfd0bfdcbea3e071eb250611f3c6c7fada4"}) [ 493.166544][T15269] loop5: p9 start 1854537728 is beyond EOD, truncated [ 493.203849][T15269] loop5: p10 start 1854537728 is beyond EOD, truncated 13:13:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) [ 493.221759][T15269] loop5: p11 start 1854537728 is beyond EOD, truncated [ 493.281505][T15269] loop5: p12 start 1854537728 is beyond EOD, truncated [ 493.301382][T15269] loop5: p13 start 1854537728 is beyond EOD, truncated [ 493.360345][T15269] loop5: p14 start 1854537728 is beyond EOD, truncated [ 493.398801][T15269] loop5: p15 start 1854537728 is beyond EOD, truncated [ 493.448915][T15269] loop5: p16 start 1854537728 is beyond EOD, truncated [ 493.491376][T15269] loop5: p17 start 1854537728 is beyond EOD, truncated [ 493.554656][T15269] loop5: p18 start 1854537728 is beyond EOD, truncated [ 493.595754][T15269] loop5: p19 start 1854537728 is beyond EOD, truncated [ 493.627070][T15269] loop5: p20 start 1854537728 is beyond EOD, truncated [ 493.654368][T15269] loop5: p21 start 1854537728 is beyond EOD, truncated [ 493.694843][T15269] loop5: p22 start 1854537728 is beyond EOD, truncated [ 493.715060][T15269] loop5: p23 start 1854537728 is beyond EOD, truncated [ 493.735311][T15269] loop5: p24 start 1854537728 is beyond EOD, truncated [ 493.751134][T15269] loop5: p25 start 1854537728 is beyond EOD, truncated [ 493.768224][T15269] loop5: p26 start 1854537728 is beyond EOD, truncated [ 493.788444][T15269] loop5: p27 start 1854537728 is beyond EOD, truncated [ 493.807202][T15269] loop5: p28 start 1854537728 is beyond EOD, truncated [ 493.831068][T15269] loop5: p29 start 1854537728 is beyond EOD, truncated [ 493.848168][T15269] loop5: p30 start 1854537728 is beyond EOD, truncated [ 493.859630][T15269] loop5: p31 start 1854537728 is beyond EOD, truncated [ 493.869766][T15269] loop5: p32 start 1854537728 is beyond EOD, truncated [ 493.879335][T15269] loop5: p33 start 1854537728 is beyond EOD, truncated [ 493.888085][T15269] loop5: p34 start 1854537728 is beyond EOD, truncated [ 493.897402][T15269] loop5: p35 start 1854537728 is beyond EOD, truncated [ 493.905832][T15269] loop5: p36 start 1854537728 is beyond EOD, truncated [ 493.913125][T15269] loop5: p37 start 1854537728 is beyond EOD, truncated [ 493.920216][T15269] loop5: p38 start 1854537728 is beyond EOD, truncated [ 493.927115][T15269] loop5: p39 start 1854537728 is beyond EOD, truncated [ 493.934004][T15269] loop5: p40 start 1854537728 is beyond EOD, truncated [ 493.940835][T15269] loop5: p41 start 1854537728 is beyond EOD, truncated [ 493.947720][T15269] loop5: p42 start 1854537728 is beyond EOD, truncated [ 493.954603][T15269] loop5: p43 start 1854537728 is beyond EOD, truncated [ 493.962593][T15269] loop5: p44 start 1854537728 is beyond EOD, truncated [ 493.969903][T15269] loop5: p45 start 1854537728 is beyond EOD, truncated [ 493.976939][T15269] loop5: p46 start 1854537728 is beyond EOD, truncated [ 493.983844][T15269] loop5: p47 start 1854537728 is beyond EOD, truncated [ 493.990694][T15269] loop5: p48 start 1854537728 is beyond EOD, truncated [ 493.997591][T15269] loop5: p49 start 1854537728 is beyond EOD, truncated [ 494.004489][T15269] loop5: p50 start 1854537728 is beyond EOD, truncated [ 494.011400][T15269] loop5: p51 start 1854537728 is beyond EOD, truncated [ 494.018357][T15269] loop5: p52 start 1854537728 is beyond EOD, truncated [ 494.025263][T15269] loop5: p53 start 1854537728 is beyond EOD, truncated [ 494.032171][T15269] loop5: p54 start 1854537728 is beyond EOD, truncated [ 494.039154][T15269] loop5: p55 start 1854537728 is beyond EOD, truncated [ 494.046044][T15269] loop5: p56 start 1854537728 is beyond EOD, truncated [ 494.053210][T15269] loop5: p57 start 1854537728 is beyond EOD, truncated [ 494.060167][T15269] loop5: p58 start 1854537728 is beyond EOD, truncated [ 494.067196][T15269] loop5: p59 start 1854537728 is beyond EOD, truncated [ 494.074120][T15269] loop5: p60 start 1854537728 is beyond EOD, truncated [ 494.080976][T15269] loop5: p61 start 1854537728 is beyond EOD, truncated [ 494.087977][T15269] loop5: p62 start 1854537728 is beyond EOD, truncated [ 494.094866][T15269] loop5: p63 start 1854537728 is beyond EOD, truncated [ 494.101773][T15269] loop5: p64 start 1854537728 is beyond EOD, truncated [ 494.108615][T15269] loop5: p65 start 1854537728 is beyond EOD, truncated [ 494.115498][T15269] loop5: p66 start 1854537728 is beyond EOD, truncated [ 494.122403][T15269] loop5: p67 start 1854537728 is beyond EOD, truncated [ 494.129262][T15269] loop5: p68 start 1854537728 is beyond EOD, truncated [ 494.136160][T15269] loop5: p69 start 1854537728 is beyond EOD, truncated [ 494.143165][T15269] loop5: p70 start 1854537728 is beyond EOD, truncated [ 494.150033][T15269] loop5: p71 start 1854537728 is beyond EOD, truncated [ 494.156933][T15269] loop5: p72 start 1854537728 is beyond EOD, truncated [ 494.163853][T15269] loop5: p73 start 1854537728 is beyond EOD, truncated [ 494.170876][T15269] loop5: p74 start 1854537728 is beyond EOD, truncated [ 494.177864][T15269] loop5: p75 start 1854537728 is beyond EOD, truncated [ 494.184769][T15269] loop5: p76 start 1854537728 is beyond EOD, truncated [ 494.191781][T15269] loop5: p77 start 1854537728 is beyond EOD, truncated [ 494.198637][T15269] loop5: p78 start 1854537728 is beyond EOD, truncated [ 494.205563][T15269] loop5: p79 start 1854537728 is beyond EOD, truncated [ 494.212540][T15269] loop5: p80 start 1854537728 is beyond EOD, truncated [ 494.219385][T15269] loop5: p81 start 1854537728 is beyond EOD, truncated [ 494.226368][T15269] loop5: p82 start 1854537728 is beyond EOD, truncated [ 494.233383][T15269] loop5: p83 start 1854537728 is beyond EOD, truncated [ 494.240249][T15269] loop5: p84 start 1854537728 is beyond EOD, truncated [ 494.247166][T15269] loop5: p85 start 1854537728 is beyond EOD, truncated [ 494.254157][T15269] loop5: p86 start 1854537728 is beyond EOD, truncated [ 494.261078][T15269] loop5: p87 start 1854537728 is beyond EOD, truncated [ 494.267925][T15269] loop5: p88 start 1854537728 is beyond EOD, truncated [ 494.274825][T15269] loop5: p89 start 1854537728 is beyond EOD, truncated [ 494.281742][T15269] loop5: p90 start 1854537728 is beyond EOD, truncated [ 494.288586][T15269] loop5: p91 start 1854537728 is beyond EOD, truncated [ 494.295470][T15269] loop5: p92 start 1854537728 is beyond EOD, truncated [ 494.302457][T15269] loop5: p93 start 1854537728 is beyond EOD, truncated [ 494.309307][T15269] loop5: p94 start 1854537728 is beyond EOD, truncated [ 494.317326][T15269] loop5: p95 start 1854537728 is beyond EOD, truncated [ 494.324221][T15269] loop5: p96 start 1854537728 is beyond EOD, truncated [ 494.331147][T15269] loop5: p97 start 1854537728 is beyond EOD, truncated [ 494.338002][T15269] loop5: p98 start 1854537728 is beyond EOD, truncated [ 494.344980][T15269] loop5: p99 start 1854537728 is beyond EOD, truncated [ 494.351901][T15269] loop5: p100 start 1854537728 is beyond EOD, truncated [ 494.359038][T15269] loop5: p101 start 1854537728 is beyond EOD, truncated [ 494.366216][T15269] loop5: p102 start 1854537728 is beyond EOD, truncated [ 494.373435][T15269] loop5: p103 start 1854537728 is beyond EOD, truncated [ 494.380434][T15269] loop5: p104 start 1854537728 is beyond EOD, truncated [ 494.387413][T15269] loop5: p105 start 1854537728 is beyond EOD, truncated [ 494.394519][T15269] loop5: p106 start 1854537728 is beyond EOD, truncated [ 494.401637][T15269] loop5: p107 start 1854537728 is beyond EOD, truncated [ 494.408587][T15269] loop5: p108 start 1854537728 is beyond EOD, truncated [ 494.415839][T15269] loop5: p109 start 1854537728 is beyond EOD, truncated [ 494.423032][T15269] loop5: p110 start 1854537728 is beyond EOD, truncated [ 494.429980][T15269] loop5: p111 start 1854537728 is beyond EOD, truncated [ 494.437002][T15269] loop5: p112 start 1854537728 is beyond EOD, truncated [ 494.444007][T15269] loop5: p113 start 1854537728 is beyond EOD, truncated [ 494.450937][T15269] loop5: p114 start 1854537728 is beyond EOD, truncated [ 494.458116][T15269] loop5: p115 start 1854537728 is beyond EOD, truncated [ 494.465154][T15269] loop5: p116 start 1854537728 is beyond EOD, truncated [ 494.472142][T15269] loop5: p117 start 1854537728 is beyond EOD, truncated [ 494.479173][T15269] loop5: p118 start 1854537728 is beyond EOD, truncated [ 494.486239][T15269] loop5: p119 start 1854537728 is beyond EOD, truncated [ 494.493226][T15269] loop5: p120 start 1854537728 is beyond EOD, truncated [ 494.500176][T15269] loop5: p121 start 1854537728 is beyond EOD, truncated [ 494.507167][T15269] loop5: p122 start 1854537728 is beyond EOD, truncated [ 494.514151][T15269] loop5: p123 start 1854537728 is beyond EOD, truncated [ 494.521220][T15269] loop5: p124 start 1854537728 is beyond EOD, truncated [ 494.528159][T15269] loop5: p125 start 1854537728 is beyond EOD, truncated [ 494.535767][T15269] loop5: p126 start 1854537728 is beyond EOD, truncated [ 494.542775][T15269] loop5: p127 start 1854537728 is beyond EOD, truncated [ 494.549877][T15269] loop5: p128 start 1854537728 is beyond EOD, truncated [ 494.556981][T15269] loop5: p129 start 1854537728 is beyond EOD, truncated [ 494.564186][T15269] loop5: p130 start 1854537728 is beyond EOD, truncated [ 494.571207][T15269] loop5: p131 start 1854537728 is beyond EOD, truncated [ 494.578162][T15269] loop5: p132 start 1854537728 is beyond EOD, truncated [ 494.585239][T15269] loop5: p133 start 1854537728 is beyond EOD, truncated [ 494.592240][T15269] loop5: p134 start 1854537728 is beyond EOD, truncated [ 494.599178][T15269] loop5: p135 start 1854537728 is beyond EOD, truncated [ 494.606182][T15269] loop5: p136 start 1854537728 is beyond EOD, truncated [ 494.613390][T15269] loop5: p137 start 1854537728 is beyond EOD, truncated [ 494.620573][T15269] loop5: p138 start 1854537728 is beyond EOD, truncated [ 494.627630][T15269] loop5: p139 start 1854537728 is beyond EOD, truncated [ 494.634809][T15269] loop5: p140 start 1854537728 is beyond EOD, truncated [ 494.641906][T15269] loop5: p141 start 1854537728 is beyond EOD, truncated [ 494.648851][T15269] loop5: p142 start 1854537728 is beyond EOD, truncated [ 494.655945][T15269] loop5: p143 start 1854537728 is beyond EOD, truncated [ 494.662948][T15269] loop5: p144 start 1854537728 is beyond EOD, truncated [ 494.669883][T15269] loop5: p145 start 1854537728 is beyond EOD, truncated [ 494.676950][T15269] loop5: p146 start 1854537728 is beyond EOD, truncated [ 494.683920][T15269] loop5: p147 start 1854537728 is beyond EOD, truncated [ 494.690845][T15269] loop5: p148 start 1854537728 is beyond EOD, truncated [ 494.698135][T15269] loop5: p149 start 1854537728 is beyond EOD, truncated [ 494.705118][T15269] loop5: p150 start 1854537728 is beyond EOD, truncated [ 494.712092][T15269] loop5: p151 start 1854537728 is beyond EOD, truncated [ 494.719544][T15269] loop5: p152 start 1854537728 is beyond EOD, truncated [ 494.726521][T15269] loop5: p153 start 1854537728 is beyond EOD, truncated [ 494.733554][T15269] loop5: p154 start 1854537728 is beyond EOD, truncated [ 494.740487][T15269] loop5: p155 start 1854537728 is beyond EOD, truncated [ 494.747787][T15269] loop5: p156 start 1854537728 is beyond EOD, truncated [ 494.754777][T15269] loop5: p157 start 1854537728 is beyond EOD, truncated [ 494.761807][T15269] loop5: p158 start 1854537728 is beyond EOD, truncated [ 494.768741][T15269] loop5: p159 start 1854537728 is beyond EOD, truncated [ 494.776489][T15269] loop5: p160 start 1854537728 is beyond EOD, truncated [ 494.783518][T15269] loop5: p161 start 1854537728 is beyond EOD, truncated [ 494.790458][T15269] loop5: p162 start 1854537728 is beyond EOD, truncated [ 494.797474][T15269] loop5: p163 start 1854537728 is beyond EOD, truncated [ 494.804470][T15269] loop5: p164 start 1854537728 is beyond EOD, truncated [ 494.811472][T15269] loop5: p165 start 1854537728 is beyond EOD, truncated [ 494.818415][T15269] loop5: p166 start 1854537728 is beyond EOD, truncated [ 494.825626][T15269] loop5: p167 start 1854537728 is beyond EOD, truncated [ 494.832645][T15269] loop5: p168 start 1854537728 is beyond EOD, truncated [ 494.839572][T15269] loop5: p169 start 1854537728 is beyond EOD, truncated [ 494.846589][T15269] loop5: p170 start 1854537728 is beyond EOD, truncated [ 494.853687][T15269] loop5: p171 start 1854537728 is beyond EOD, truncated [ 494.860618][T15269] loop5: p172 start 1854537728 is beyond EOD, truncated [ 494.867617][T15269] loop5: p173 start 1854537728 is beyond EOD, truncated [ 494.874607][T15269] loop5: p174 start 1854537728 is beyond EOD, truncated [ 494.881623][T15269] loop5: p175 start 1854537728 is beyond EOD, truncated [ 494.888585][T15269] loop5: p176 start 1854537728 is beyond EOD, truncated [ 494.895953][T15269] loop5: p177 start 1854537728 is beyond EOD, truncated [ 494.902969][T15269] loop5: p178 start 1854537728 is beyond EOD, truncated [ 494.909919][T15269] loop5: p179 start 1854537728 is beyond EOD, truncated [ 494.916931][T15269] loop5: p180 start 1854537728 is beyond EOD, truncated [ 494.931460][T15269] loop5: p181 start 1854537728 is beyond EOD, truncated [ 494.938434][T15269] loop5: p182 start 1854537728 is beyond EOD, truncated [ 494.945461][T15269] loop5: p183 start 1854537728 is beyond EOD, truncated [ 494.952482][T15269] loop5: p184 start 1854537728 is beyond EOD, truncated [ 494.959412][T15269] loop5: p185 start 1854537728 is beyond EOD, truncated [ 494.966527][T15269] loop5: p186 start 1854537728 is beyond EOD, truncated [ 494.973536][T15269] loop5: p187 start 1854537728 is beyond EOD, truncated [ 494.980556][T15269] loop5: p188 start 1854537728 is beyond EOD, truncated [ 494.987578][T15269] loop5: p189 start 1854537728 is beyond EOD, truncated [ 494.994562][T15269] loop5: p190 start 1854537728 is beyond EOD, truncated [ 495.001582][T15269] loop5: p191 start 1854537728 is beyond EOD, truncated [ 495.008539][T15269] loop5: p192 start 1854537728 is beyond EOD, truncated [ 495.015603][T15269] loop5: p193 start 1854537728 is beyond EOD, truncated [ 495.022779][T15269] loop5: p194 start 1854537728 is beyond EOD, truncated [ 495.029728][T15269] loop5: p195 start 1854537728 is beyond EOD, truncated [ 495.036748][T15269] loop5: p196 start 1854537728 is beyond EOD, truncated [ 495.043744][T15269] loop5: p197 start 1854537728 is beyond EOD, truncated [ 495.051478][T15269] loop5: p198 start 1854537728 is beyond EOD, truncated [ 495.058427][T15269] loop5: p199 start 1854537728 is beyond EOD, truncated [ 495.065448][T15269] loop5: p200 start 1854537728 is beyond EOD, truncated [ 495.072515][T15269] loop5: p201 start 1854537728 is beyond EOD, truncated [ 495.079436][T15269] loop5: p202 start 1854537728 is beyond EOD, truncated [ 495.086448][T15269] loop5: p203 start 1854537728 is beyond EOD, truncated [ 495.093496][T15269] loop5: p204 start 1854537728 is beyond EOD, truncated [ 495.100520][T15269] loop5: p205 start 1854537728 is beyond EOD, truncated [ 495.107524][T15269] loop5: p206 start 1854537728 is beyond EOD, truncated [ 495.114583][T15269] loop5: p207 start 1854537728 is beyond EOD, truncated [ 495.121574][T15269] loop5: p208 start 1854537728 is beyond EOD, truncated [ 495.128533][T15269] loop5: p209 start 1854537728 is beyond EOD, truncated [ 495.135873][T15269] loop5: p210 start 1854537728 is beyond EOD, truncated [ 495.142919][T15269] loop5: p211 start 1854537728 is beyond EOD, truncated [ 495.149887][T15269] loop5: p212 start 1854537728 is beyond EOD, truncated [ 495.156867][T15269] loop5: p213 start 1854537728 is beyond EOD, truncated [ 495.163869][T15269] loop5: p214 start 1854537728 is beyond EOD, truncated [ 495.170911][T15269] loop5: p215 start 1854537728 is beyond EOD, truncated [ 495.177900][T15269] loop5: p216 start 1854537728 is beyond EOD, truncated [ 495.184975][T15269] loop5: p217 start 1854537728 is beyond EOD, truncated [ 495.191972][T15269] loop5: p218 start 1854537728 is beyond EOD, truncated [ 495.200233][T15269] loop5: p219 start 1854537728 is beyond EOD, truncated [ 495.207263][T15269] loop5: p220 start 1854537728 is beyond EOD, truncated [ 495.214399][T15269] loop5: p221 start 1854537728 is beyond EOD, truncated [ 495.221537][T15269] loop5: p222 start 1854537728 is beyond EOD, truncated [ 495.228726][T15269] loop5: p223 start 1854537728 is beyond EOD, truncated [ 495.235883][T15269] loop5: p224 start 1854537728 is beyond EOD, truncated [ 495.243289][T15269] loop5: p225 start 1854537728 is beyond EOD, truncated [ 495.250669][T15269] loop5: p226 start 1854537728 is beyond EOD, truncated [ 495.257670][T15269] loop5: p227 start 1854537728 is beyond EOD, truncated [ 495.264788][T15269] loop5: p228 start 1854537728 is beyond EOD, truncated [ 495.271794][T15269] loop5: p229 start 1854537728 is beyond EOD, truncated [ 495.278815][T15269] loop5: p230 start 1854537728 is beyond EOD, truncated [ 495.285807][T15269] loop5: p231 start 1854537728 is beyond EOD, truncated [ 495.292851][T15269] loop5: p232 start 1854537728 is beyond EOD, truncated [ 495.299965][T15269] loop5: p233 start 1854537728 is beyond EOD, truncated [ 495.307107][T15269] loop5: p234 start 1854537728 is beyond EOD, truncated [ 495.316091][T15269] loop5: p235 start 1854537728 is beyond EOD, truncated [ 495.323225][T15269] loop5: p236 start 1854537728 is beyond EOD, truncated [ 495.330228][T15269] loop5: p237 start 1854537728 is beyond EOD, truncated [ 495.339816][T15269] loop5: p238 start 1854537728 is beyond EOD, truncated [ 495.346912][T15269] loop5: p239 start 1854537728 is beyond EOD, truncated [ 495.353894][T15269] loop5: p240 start 1854537728 is beyond EOD, truncated [ 495.360939][T15269] loop5: p241 start 1854537728 is beyond EOD, truncated [ 495.368037][T15269] loop5: p242 start 1854537728 is beyond EOD, truncated [ 495.375201][T15269] loop5: p243 start 1854537728 is beyond EOD, truncated [ 495.382207][T15269] loop5: p244 start 1854537728 is beyond EOD, truncated [ 495.389158][T15269] loop5: p245 start 1854537728 is beyond EOD, truncated [ 495.396225][T15269] loop5: p246 start 1854537728 is beyond EOD, truncated [ 495.403335][T15269] loop5: p247 start 1854537728 is beyond EOD, truncated [ 495.410281][T15269] loop5: p248 start 1854537728 is beyond EOD, truncated [ 495.417321][T15269] loop5: p249 start 1854537728 is beyond EOD, truncated [ 495.424577][T15269] loop5: p250 start 1854537728 is beyond EOD, truncated [ 495.431631][T15269] loop5: p251 start 1854537728 is beyond EOD, truncated [ 495.438740][T15269] loop5: p252 start 1854537728 is beyond EOD, truncated [ 495.445742][T15269] loop5: p253 start 1854537728 is beyond EOD, truncated [ 495.452701][T15269] loop5: p254 start 1854537728 is beyond EOD, truncated [ 495.459636][T15269] loop5: p255 start 1854537728 is beyond EOD, truncated 13:13:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 13:13:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x2ac, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x1}, 0x14}, 0x1, 0xf000}, 0x0) 13:13:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ec0)='/proc/sys/net/ipv4/\x00\x10/nc_version\x00\x00\x00\x83\xef\xdd&\xd4\xea\xe3T\xc7\xf4NC\\\xa9\x1e\xac\xdd\xcc\xe5uuj\xb7\x0f\xea@\x89\x7f\rs\xc7=p5\x98\x8dg\xf5\x90l\x04\xc6_\xab\r \x98\xd9\xa2\x84\xb12d\x86\r\xe6\a\"#v\xa3}\x82(\xf2\xce\xd9\x14\xaf\x92\x16\xaa\xf9M\xfa\xc9/;Y\x89\xca\x12\xa0o\x8a\xdc\xa8\bP!\xd4\xc8g\x1c\xbd\xff\x90M\x96C~\'r\xe1kFRe\x9cf\xcc\xd7\x1e\xc9\xfb\xf5\n]\x1a;!\xa9\x14\xd6\x05\x13`\f\x1aa\xed\xfa\xcc\xda\t\xe5C\xe6\x8d8\xb2\x17N\xec\x86:wu\xe5\xc3\xddVn\xc3$\xbc^\xb4\xac\b\xca\x16\x02\xcb\xbb>\x04\xf3.>3\xe4\xce\xaf\xb2\x1c\xef\x86\xdb\x03PD\xaf\x7f\xe3\x88\xd71=\x7f\xe5\xe4\x8fls', 0x2, 0x0) open(0x0, 0x800000141042, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40000, 0x0) 13:13:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001b40)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:13:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0xb, @raw_data="43553038bebdf82c50f2ca42f818ea55c4ccafdcf88ad8112cf4f484d34c3ae1b3d6a98496804cf9482f28dde89301a145eb6db07837739a43a80dbf275afbf0133a8ae38a5c93024190cc759e43bf2b904b0d15ccb74d7ee6b121bdcd88ab3babc15d07c296424360407cfd87117fc0df01a2796f74bd631144442729f1976316b8cac337753e26029657fcfb90490a1f5a92d37532bd522652415fee26a6b0dfabbeab7b09681ec2e8d6eab393c3d278dc2e4efb5e9dfd0bfdcbea3e071eb250611f3c6c7fada4"}) 13:13:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0) 13:13:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xbc, 0x0) 13:13:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0xb, @raw_data="43553038bebdf82c50f2ca42f818ea55c4ccafdcf88ad8112cf4f484d34c3ae1b3d6a98496804cf9482f28dde89301a145eb6db07837739a43a80dbf275afbf0133a8ae38a5c93024190cc759e43bf2b904b0d15ccb74d7ee6b121bdcd88ab3babc15d07c296424360407cfd87117fc0df01a2796f74bd631144442729f1976316b8cac337753e26029657fcfb90490a1f5a92d37532bd522652415fee26a6b0dfabbeab7b09681ec2e8d6eab393c3d278dc2e4efb5e9dfd0bfdcbea3e071eb250611f3c6c7fada4"}) 13:13:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40096102, 0x0) 13:13:34 executing program 1: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x2ab, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x420b, r0, 0x8, 0x807100) [ 495.844230][T15313] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 495.844441][T15313] loop5: partition table partially beyond EOD, [ 495.916725][T15328] QAT: failed to copy from user cfg_data. 13:13:34 executing program 4: setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000270005", 0x7}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) [ 495.933509][T15313] truncated 13:13:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000002000/0xc000)=nil, &(0x7f0000001000/0x12000)=nil, 0xc000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r4, &(0x7f0000000080), 0x5b) [ 495.974369][T15313] loop5: p1 size 2 extends beyond EOD, truncated [ 495.992346][T15313] loop5: p4 start 1854537728 is beyond EOD, truncated [ 495.999714][T15313] loop5: p5 start 1854537728 is beyond EOD, truncated [ 496.015741][T15313] loop5: p6 start 1854537728 is beyond EOD, truncated [ 496.046109][T15313] loop5: p7 start 1854537728 is beyond EOD, truncated [ 496.076317][T15313] loop5: p8 start 1854537728 is beyond EOD, truncated [ 496.103440][T15313] loop5: p9 start 1854537728 is beyond EOD, truncated [ 496.127835][T15313] loop5: p10 start 1854537728 is beyond EOD, truncated [ 496.139233][T15313] loop5: p11 start 1854537728 is beyond EOD, truncated [ 496.157135][T15313] loop5: p12 start 1854537728 is beyond EOD, truncated [ 496.160557][T15336] device nr0 entered promiscuous mode [ 496.181679][T15313] loop5: p13 start 1854537728 is beyond EOD, truncated [ 496.188746][T15313] loop5: p14 start 1854537728 is beyond EOD, truncated [ 496.213315][T15313] loop5: p15 start 1854537728 is beyond EOD, truncated [ 496.232130][T15313] loop5: p16 start 1854537728 is beyond EOD, truncated [ 496.239197][T15313] loop5: p17 start 1854537728 is beyond EOD, truncated [ 496.297663][T15313] loop5: p18 start 1854537728 is beyond EOD, truncated [ 496.304841][T15313] loop5: p19 start 1854537728 is beyond EOD, truncated [ 496.318781][T15313] loop5: p20 start 1854537728 is beyond EOD, truncated [ 496.326442][T15313] loop5: p21 start 1854537728 is beyond EOD, truncated [ 496.340034][T15313] loop5: p22 start 1854537728 is beyond EOD, truncated [ 496.347207][T15313] loop5: p23 start 1854537728 is beyond EOD, truncated [ 496.361296][T15313] loop5: p24 start 1854537728 is beyond EOD, truncated [ 496.370670][T15313] loop5: p25 start 1854537728 is beyond EOD, truncated [ 496.391133][T15313] loop5: p26 start 1854537728 is beyond EOD, truncated [ 496.398279][T15313] loop5: p27 start 1854537728 is beyond EOD, truncated [ 496.405474][T15313] loop5: p28 start 1854537728 is beyond EOD, truncated [ 496.415194][T15313] loop5: p29 start 1854537728 is beyond EOD, truncated [ 496.435869][T15313] loop5: p30 start 1854537728 is beyond EOD, truncated [ 496.457743][T15313] loop5: p31 start 1854537728 is beyond EOD, truncated [ 496.464795][T15313] loop5: p32 start 1854537728 is beyond EOD, truncated [ 496.471741][T15313] loop5: p33 start 1854537728 is beyond EOD, truncated [ 496.478597][T15313] loop5: p34 start 1854537728 is beyond EOD, truncated [ 496.485648][T15313] loop5: p35 start 1854537728 is beyond EOD, truncated [ 496.493515][T15313] loop5: p36 start 1854537728 is beyond EOD, truncated [ 496.500376][T15313] loop5: p37 start 1854537728 is beyond EOD, truncated [ 496.507332][T15313] loop5: p38 start 1854537728 is beyond EOD, truncated [ 496.514246][T15313] loop5: p39 start 1854537728 is beyond EOD, truncated [ 496.521134][T15313] loop5: p40 start 1854537728 is beyond EOD, truncated [ 496.528948][T15313] loop5: p41 start 1854537728 is beyond EOD, truncated [ 496.535874][T15313] loop5: p42 start 1854537728 is beyond EOD, truncated [ 496.542779][T15313] loop5: p43 start 1854537728 is beyond EOD, truncated [ 496.549622][T15313] loop5: p44 start 1854537728 is beyond EOD, truncated [ 496.556578][T15313] loop5: p45 start 1854537728 is beyond EOD, truncated [ 496.563838][T15313] loop5: p46 start 1854537728 is beyond EOD, truncated [ 496.570671][T15313] loop5: p47 start 1854537728 is beyond EOD, truncated [ 496.577607][T15313] loop5: p48 start 1854537728 is beyond EOD, truncated [ 496.584559][T15313] loop5: p49 start 1854537728 is beyond EOD, truncated [ 496.591680][T15313] loop5: p50 start 1854537728 is beyond EOD, truncated [ 496.598527][T15313] loop5: p51 start 1854537728 is beyond EOD, truncated [ 496.605471][T15313] loop5: p52 start 1854537728 is beyond EOD, truncated [ 496.612639][T15313] loop5: p53 start 1854537728 is beyond EOD, truncated [ 496.619496][T15313] loop5: p54 start 1854537728 is beyond EOD, truncated [ 496.627215][T15313] loop5: p55 start 1854537728 is beyond EOD, truncated [ 496.634171][T15313] loop5: p56 start 1854537728 is beyond EOD, truncated [ 496.641075][T15313] loop5: p57 start 1854537728 is beyond EOD, truncated [ 496.647927][T15313] loop5: p58 start 1854537728 is beyond EOD, truncated [ 496.654887][T15313] loop5: p59 start 1854537728 is beyond EOD, truncated [ 496.662382][T15313] loop5: p60 start 1854537728 is beyond EOD, truncated [ 496.669342][T15313] loop5: p61 start 1854537728 is beyond EOD, truncated [ 496.680754][T15313] loop5: p62 start 1854537728 is beyond EOD, truncated [ 496.688691][T15313] loop5: p63 start 1854537728 is beyond EOD, truncated [ 496.700557][T15313] loop5: p64 start 1854537728 is beyond EOD, truncated [ 496.709387][T15313] loop5: p65 start 1854537728 is beyond EOD, truncated [ 496.716420][T15313] loop5: p66 start 1854537728 is beyond EOD, truncated [ 496.723378][T15313] loop5: p67 start 1854537728 is beyond EOD, truncated [ 496.730226][T15313] loop5: p68 start 1854537728 is beyond EOD, truncated [ 496.737158][T15313] loop5: p69 start 1854537728 is beyond EOD, truncated [ 496.744083][T15313] loop5: p70 start 1854537728 is beyond EOD, truncated [ 496.750953][T15313] loop5: p71 start 1854537728 is beyond EOD, truncated [ 496.758514][T15313] loop5: p72 start 1854537728 is beyond EOD, truncated [ 496.765563][T15313] loop5: p73 start 1854537728 is beyond EOD, truncated [ 496.772673][T15313] loop5: p74 start 1854537728 is beyond EOD, truncated [ 496.779593][T15313] loop5: p75 start 1854537728 is beyond EOD, truncated [ 496.786528][T15313] loop5: p76 start 1854537728 is beyond EOD, truncated [ 496.793455][T15313] loop5: p77 start 1854537728 is beyond EOD, truncated [ 496.800304][T15313] loop5: p78 start 1854537728 is beyond EOD, truncated [ 496.800317][T15313] loop5: p79 start 1854537728 is beyond EOD, truncated [ 496.800326][T15313] loop5: p80 start 1854537728 is beyond EOD, truncated [ 496.814366][T15313] loop5: p81 start 1854537728 is beyond EOD, truncated [ 496.827910][T15313] loop5: p82 start 1854537728 is beyond EOD, truncated [ 496.834852][T15313] loop5: p83 start 1854537728 is beyond EOD, truncated [ 496.834865][T15313] loop5: p84 start 1854537728 is beyond EOD, truncated [ 496.834876][T15313] loop5: p85 start 1854537728 is beyond EOD, truncated [ 496.834887][T15313] loop5: p86 start 1854537728 is beyond EOD, truncated [ 496.834898][T15313] loop5: p87 start 1854537728 is beyond EOD, truncated [ 496.834909][T15313] loop5: p88 start 1854537728 is beyond EOD, truncated [ 496.834924][T15313] loop5: p89 start 1854537728 is beyond EOD, truncated [ 496.834934][T15313] loop5: p90 start 1854537728 is beyond EOD, truncated [ 496.834944][T15313] loop5: p91 start 1854537728 is beyond EOD, truncated [ 496.834954][T15313] loop5: p92 start 1854537728 is beyond EOD, truncated [ 496.834965][T15313] loop5: p93 start 1854537728 is beyond EOD, truncated [ 496.834974][T15313] loop5: p94 start 1854537728 is beyond EOD, truncated [ 496.858590][T15313] loop5: p95 start 1854537728 is beyond EOD, truncated [ 496.883110][T15313] loop5: p96 start 1854537728 is beyond EOD, truncated [ 496.890417][T15313] loop5: p97 start 1854537728 is beyond EOD, truncated [ 496.890429][T15313] loop5: p98 start 1854537728 is beyond EOD, truncated [ 496.890441][T15313] loop5: p99 start 1854537728 is beyond EOD, truncated [ 496.890451][T15313] loop5: p100 start 1854537728 is beyond EOD, truncated [ 496.890469][T15313] loop5: p101 start 1854537728 is beyond EOD, truncated [ 496.918191][T15313] loop5: p102 start 1854537728 is beyond EOD, truncated [ 496.918204][T15313] loop5: p103 start 1854537728 is beyond EOD, truncated [ 496.918226][T15313] loop5: p104 start 1854537728 is beyond EOD, truncated [ 496.932118][T15313] loop5: p105 start 1854537728 is beyond EOD, truncated [ 496.945788][T15313] loop5: p106 start 1854537728 is beyond EOD, truncated [ 496.945799][T15313] loop5: p107 start 1854537728 is beyond EOD, truncated [ 496.945811][T15313] loop5: p108 start 1854537728 is beyond EOD, truncated [ 496.945821][T15313] loop5: p109 start 1854537728 is beyond EOD, truncated [ 496.945831][T15313] loop5: p110 start 1854537728 is beyond EOD, truncated [ 496.945842][T15313] loop5: p111 start 1854537728 is beyond EOD, truncated [ 496.945853][T15313] loop5: p112 start 1854537728 is beyond EOD, truncated [ 496.966834][T15313] loop5: p113 start 1854537728 is beyond EOD, truncated [ 496.966846][T15313] loop5: p114 start 1854537728 is beyond EOD, truncated [ 496.967370][T15313] loop5: p115 start 1854537728 is beyond EOD, truncated [ 496.995025][T15313] loop5: p116 start 1854537728 is beyond EOD, truncated [ 496.995099][T15313] loop5: p117 start 1854537728 is beyond EOD, truncated [ 497.009192][T15313] loop5: p118 start 1854537728 is beyond EOD, truncated [ 497.023970][T15313] loop5: p119 start 1854537728 is beyond EOD, truncated [ 497.035670][T15345] device nr0 entered promiscuous mode [ 497.037474][T15313] loop5: p120 start 1854537728 is beyond EOD, truncated [ 497.105499][T15313] loop5: p121 start 1854537728 is beyond EOD, truncated [ 497.113030][T15313] loop5: p122 start 1854537728 is beyond EOD, truncated [ 497.119979][T15313] loop5: p123 start 1854537728 is beyond EOD, truncated [ 497.127448][T15313] loop5: p124 start 1854537728 is beyond EOD, truncated [ 497.134767][T15313] loop5: p125 start 1854537728 is beyond EOD, truncated [ 497.142243][T15313] loop5: p126 start 1854537728 is beyond EOD, truncated [ 497.149182][T15313] loop5: p127 start 1854537728 is beyond EOD, truncated [ 497.156578][T15313] loop5: p128 start 1854537728 is beyond EOD, truncated [ 497.163846][T15313] loop5: p129 start 1854537728 is beyond EOD, truncated [ 497.170786][T15313] loop5: p130 start 1854537728 is beyond EOD, truncated [ 497.178279][T15313] loop5: p131 start 1854537728 is beyond EOD, truncated [ 497.190737][T15313] loop5: p132 start 1854537728 is beyond EOD, truncated [ 497.199055][T15313] loop5: p133 start 1854537728 is beyond EOD, truncated [ 497.212529][T15313] loop5: p134 start 1854537728 is beyond EOD, truncated [ 497.219489][T15313] loop5: p135 start 1854537728 is beyond EOD, truncated [ 497.226940][T15313] loop5: p136 start 1854537728 is beyond EOD, truncated [ 497.234443][T15313] loop5: p137 start 1854537728 is beyond EOD, truncated [ 497.241735][T15313] loop5: p138 start 1854537728 is beyond EOD, truncated [ 497.249204][T15313] loop5: p139 start 1854537728 is beyond EOD, truncated [ 497.256671][T15313] loop5: p140 start 1854537728 is beyond EOD, truncated [ 497.268166][T15313] loop5: p141 start 1854537728 is beyond EOD, truncated [ 497.275552][T15313] loop5: p142 start 1854537728 is beyond EOD, truncated [ 497.282956][T15313] loop5: p143 start 1854537728 is beyond EOD, truncated [ 497.289927][T15313] loop5: p144 start 1854537728 is beyond EOD, truncated [ 497.297270][T15313] loop5: p145 start 1854537728 is beyond EOD, truncated [ 497.304583][T15313] loop5: p146 start 1854537728 is beyond EOD, truncated [ 497.311907][T15313] loop5: p147 start 1854537728 is beyond EOD, truncated [ 497.318902][T15313] loop5: p148 start 1854537728 is beyond EOD, truncated [ 497.325931][T15313] loop5: p149 start 1854537728 is beyond EOD, truncated [ 497.332914][T15313] loop5: p150 start 1854537728 is beyond EOD, truncated [ 497.332925][T15313] loop5: p151 start 1854537728 is beyond EOD, truncated [ 497.332936][T15313] loop5: p152 start 1854537728 is beyond EOD, truncated [ 497.332946][T15313] loop5: p153 start 1854537728 is beyond EOD, truncated [ 497.332957][T15313] loop5: p154 start 1854537728 is beyond EOD, truncated [ 497.332967][T15313] loop5: p155 start 1854537728 is beyond EOD, truncated [ 497.332978][T15313] loop5: p156 start 1854537728 is beyond EOD, truncated [ 497.332987][T15313] loop5: p157 start 1854537728 is beyond EOD, truncated [ 497.332998][T15313] loop5: p158 start 1854537728 is beyond EOD, truncated [ 497.333007][T15313] loop5: p159 start 1854537728 is beyond EOD, truncated [ 497.333018][T15313] loop5: p160 start 1854537728 is beyond EOD, truncated [ 497.333033][T15313] loop5: p161 start 1854537728 is beyond EOD, truncated [ 497.346999][T15313] loop5: p162 start 1854537728 is beyond EOD, truncated [ 497.361518][T15313] loop5: p163 start 1854537728 is beyond EOD, truncated [ 497.375504][T15313] loop5: p164 start 1854537728 is beyond EOD, truncated [ 497.389324][T15313] loop5: p165 start 1854537728 is beyond EOD, truncated [ 497.403907][T15313] loop5: p166 start 1854537728 is beyond EOD, truncated [ 497.417557][T15313] loop5: p167 start 1854537728 is beyond EOD, truncated [ 497.431606][T15313] loop5: p168 start 1854537728 is beyond EOD, truncated [ 497.445630][T15313] loop5: p169 start 1854537728 is beyond EOD, truncated [ 497.459672][T15313] loop5: p170 start 1854537728 is beyond EOD, truncated [ 497.474904][T15313] loop5: p171 start 1854537728 is beyond EOD, truncated [ 497.488340][T15313] loop5: p172 start 1854537728 is beyond EOD, truncated [ 497.488358][T15313] loop5: p173 start 1854537728 is beyond EOD, truncated [ 497.503888][T15313] loop5: p174 start 1854537728 is beyond EOD, truncated [ 497.511248][T15313] loop5: p175 start 1854537728 is beyond EOD, truncated [ 497.518255][T15313] loop5: p176 start 1854537728 is beyond EOD, truncated [ 497.525748][T15313] loop5: p177 start 1854537728 is beyond EOD, truncated [ 497.533139][T15313] loop5: p178 start 1854537728 is beyond EOD, truncated [ 497.540073][T15313] loop5: p179 start 1854537728 is beyond EOD, truncated [ 497.547051][T15313] loop5: p180 start 1854537728 is beyond EOD, truncated [ 497.554019][T15313] loop5: p181 start 1854537728 is beyond EOD, truncated [ 497.560950][T15313] loop5: p182 start 1854537728 is beyond EOD, truncated [ 497.568013][T15313] loop5: p183 start 1854537728 is beyond EOD, truncated [ 497.575210][T15313] loop5: p184 start 1854537728 is beyond EOD, truncated [ 497.582232][T15313] loop5: p185 start 1854537728 is beyond EOD, truncated [ 497.589164][T15313] loop5: p186 start 1854537728 is beyond EOD, truncated [ 497.596200][T15313] loop5: p187 start 1854537728 is beyond EOD, truncated [ 497.603182][T15313] loop5: p188 start 1854537728 is beyond EOD, truncated [ 497.610283][T15313] loop5: p189 start 1854537728 is beyond EOD, truncated [ 497.617341][T15313] loop5: p190 start 1854537728 is beyond EOD, truncated [ 497.624321][T15313] loop5: p191 start 1854537728 is beyond EOD, truncated [ 497.631390][T15313] loop5: p192 start 1854537728 is beyond EOD, truncated [ 497.638523][T15313] loop5: p193 start 1854537728 is beyond EOD, truncated [ 497.645544][T15313] loop5: p194 start 1854537728 is beyond EOD, truncated [ 497.653482][T15313] loop5: p195 start 1854537728 is beyond EOD, truncated [ 497.660420][T15313] loop5: p196 start 1854537728 is beyond EOD, truncated [ 497.667419][T15313] loop5: p197 start 1854537728 is beyond EOD, truncated [ 497.678744][T15313] loop5: p198 start 1854537728 is beyond EOD, truncated [ 497.685755][T15313] loop5: p199 start 1854537728 is beyond EOD, truncated [ 497.694044][T15313] loop5: p200 start 1854537728 is beyond EOD, truncated [ 497.700964][T15313] loop5: p201 start 1854537728 is beyond EOD, truncated [ 497.707946][T15313] loop5: p202 start 1854537728 is beyond EOD, truncated [ 497.714917][T15313] loop5: p203 start 1854537728 is beyond EOD, truncated [ 497.721892][T15313] loop5: p204 start 1854537728 is beyond EOD, truncated [ 497.728825][T15313] loop5: p205 start 1854537728 is beyond EOD, truncated [ 497.735924][T15313] loop5: p206 start 1854537728 is beyond EOD, truncated [ 497.742910][T15313] loop5: p207 start 1854537728 is beyond EOD, truncated [ 497.749846][T15313] loop5: p208 start 1854537728 is beyond EOD, truncated [ 497.756911][T15313] loop5: p209 start 1854537728 is beyond EOD, truncated [ 497.763900][T15313] loop5: p210 start 1854537728 is beyond EOD, truncated [ 497.770834][T15313] loop5: p211 start 1854537728 is beyond EOD, truncated [ 497.777808][T15313] loop5: p212 start 1854537728 is beyond EOD, truncated [ 497.787303][T15313] loop5: p213 start 1854537728 is beyond EOD, truncated [ 497.794319][T15313] loop5: p214 start 1854537728 is beyond EOD, truncated [ 497.801291][T15313] loop5: p215 start 1854537728 is beyond EOD, truncated [ 497.808236][T15313] loop5: p216 start 1854537728 is beyond EOD, truncated [ 497.815257][T15313] loop5: p217 start 1854537728 is beyond EOD, truncated [ 497.822245][T15313] loop5: p218 start 1854537728 is beyond EOD, truncated [ 497.829176][T15313] loop5: p219 start 1854537728 is beyond EOD, truncated [ 497.836149][T15313] loop5: p220 start 1854537728 is beyond EOD, truncated [ 497.843140][T15313] loop5: p221 start 1854537728 is beyond EOD, truncated [ 497.850156][T15313] loop5: p222 start 1854537728 is beyond EOD, truncated [ 497.857138][T15313] loop5: p223 start 1854537728 is beyond EOD, truncated [ 497.864115][T15313] loop5: p224 start 1854537728 is beyond EOD, truncated [ 497.871113][T15313] loop5: p225 start 1854537728 is beyond EOD, truncated [ 497.878305][T15313] loop5: p226 start 1854537728 is beyond EOD, truncated [ 497.885271][T15313] loop5: p227 start 1854537728 is beyond EOD, truncated [ 497.892335][T15313] loop5: p228 start 1854537728 is beyond EOD, truncated [ 497.899269][T15313] loop5: p229 start 1854537728 is beyond EOD, truncated [ 497.906259][T15313] loop5: p230 start 1854537728 is beyond EOD, truncated [ 497.913328][T15313] loop5: p231 start 1854537728 is beyond EOD, truncated [ 497.920269][T15313] loop5: p232 start 1854537728 is beyond EOD, truncated [ 497.927249][T15313] loop5: p233 start 1854537728 is beyond EOD, truncated [ 497.934205][T15313] loop5: p234 start 1854537728 is beyond EOD, truncated [ 497.941175][T15313] loop5: p235 start 1854537728 is beyond EOD, truncated [ 497.948109][T15313] loop5: p236 start 1854537728 is beyond EOD, truncated [ 497.955129][T15313] loop5: p237 start 1854537728 is beyond EOD, truncated [ 497.962110][T15313] loop5: p238 start 1854537728 is beyond EOD, truncated [ 497.969044][T15313] loop5: p239 start 1854537728 is beyond EOD, truncated [ 497.976015][T15313] loop5: p240 start 1854537728 is beyond EOD, truncated [ 497.983011][T15313] loop5: p241 start 1854537728 is beyond EOD, truncated [ 497.989961][T15313] loop5: p242 start 1854537728 is beyond EOD, truncated [ 497.996960][T15313] loop5: p243 start 1854537728 is beyond EOD, truncated [ 498.004021][T15313] loop5: p244 start 1854537728 is beyond EOD, truncated [ 498.010978][T15313] loop5: p245 start 1854537728 is beyond EOD, truncated [ 498.018165][T15313] loop5: p246 start 1854537728 is beyond EOD, truncated [ 498.025186][T15313] loop5: p247 start 1854537728 is beyond EOD, truncated [ 498.032259][T15313] loop5: p248 start 1854537728 is beyond EOD, truncated [ 498.039203][T15313] loop5: p249 start 1854537728 is beyond EOD, truncated [ 498.046181][T15313] loop5: p250 start 1854537728 is beyond EOD, truncated [ 498.053320][T15313] loop5: p251 start 1854537728 is beyond EOD, truncated 13:13:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 13:13:36 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pwritev(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000280)="0441176e4efdeb03b7ad62bdf59afa7a83fe6e80f4d81be6b55b675f5a3d7286561b41dd21b84cf2db0319a303bc68b65de8a70cc5392ecae042adae36dd8a009942ae06b1c67b4e62e430fdc861d7fea18bd0d00c05d181775a1def6e0bacf3737a68cb573165c7e50771795bced3913408f9725dbae0399dc04b5caf35bf433c374d6a7f81eafb42db301b9555e5eea4b7e7b1afc66407da1f2c2f1b18ac4dcaf5", 0xa2}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:13:36 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800060c0045004, &(0x7f0000000140)) 13:13:36 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) semget(0x3, 0x4, 0x104) semctl$SEM_STAT(0x0, 0x758d788dc069ea1d, 0x12, &(0x7f0000000200)=""/44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x8}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d04587", 0x42, 0xffffffffffffffff, 0x0, 0x0) [ 498.060253][T15313] loop5: p252 start 1854537728 is beyond EOD, truncated [ 498.067237][T15313] loop5: p253 start 1854537728 is beyond EOD, truncated [ 498.074281][T15313] loop5: p254 start 1854537728 is beyond EOD, truncated [ 498.081371][T15313] loop5: p255 start 1854537728 is beyond EOD, truncated 13:13:36 executing program 5: futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0) 13:13:36 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb90401", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000000)=[{0x18, 0x84}], 0x1f}, 0xfc) [ 498.186433][T15357] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) 13:13:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) [ 498.277304][T15357] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 13:13:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x211, 0x0, 0x0, {{}, 0x0, 0x4102, 0x0, {0x4, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) [ 498.485671][T15375] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 498.506067][T15375] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 498.544514][T15376] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 13:13:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)='deSC', 0x3) write(r0, &(0x7f0000000000)="ff", 0xfffffeed) fcntl$addseals(r0, 0x409, 0x8) 13:13:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltaction={0x18, 0x31, 0x11, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 13:13:37 executing program 4: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}}) 13:13:37 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) semget(0x3, 0x4, 0x104) semctl$SEM_STAT(0x0, 0x758d788dc069ea1d, 0x12, &(0x7f0000000200)=""/44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x8}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d04587", 0x42, 0xffffffffffffffff, 0x0, 0x0) [ 498.701949][T15376] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 13:13:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000000)) 13:13:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000002c0)=""/134, 0x86}], 0x2, 0x0) 13:13:37 executing program 4: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}}) 13:13:38 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) semget(0x3, 0x4, 0x104) semctl$SEM_STAT(0x0, 0x758d788dc069ea1d, 0x12, &(0x7f0000000200)=""/44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x8}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d04587", 0x42, 0xffffffffffffffff, 0x0, 0x0) 13:13:38 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000240)="e5dcd2dd57144000000000", 0xb, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 499.349313][T15416] can: request_module (can-proto-0) failed. [ 499.501737][T15416] can: request_module (can-proto-0) failed. 13:13:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:38 executing program 4: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}}) 13:13:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x87fff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x1}, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0}}) 13:13:38 executing program 0: r0 = memfd_create(&(0x7f0000000080)='deSC', 0x3) write(r0, &(0x7f0000000000)="ff", 0xfffffeed) fcntl$addseals(r0, 0x409, 0x8) 13:13:38 executing program 4: open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}}) 13:13:38 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) semget(0x3, 0x4, 0x104) semctl$SEM_STAT(0x0, 0x758d788dc069ea1d, 0x12, &(0x7f0000000200)=""/44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x8}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="ce03100001000100ff901efc9fb35c22cc6dc37916237d8599b512eceb92bd30961166bf00000000070000e19b40b4288ba4e852e8876e977ac94186835a03d04587", 0x42, 0xffffffffffffffff, 0x0, 0x0) 13:13:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)='deSC', 0x3) write(r0, &(0x7f0000000000)="ff", 0xfffffeed) fcntl$addseals(r0, 0x409, 0x8) 13:13:40 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffdb) fcntl$addseals(r3, 0x409, 0x8) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) tkill(r0, 0x1000000000013) 13:13:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 13:13:40 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffdb) fcntl$addseals(r3, 0x409, 0x8) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) tkill(r0, 0x1000000000013) 13:13:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:41 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffdb) fcntl$addseals(r3, 0x409, 0x8) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) tkill(r0, 0x1000000000013) 13:13:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0xf4240) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) write(r1, &(0x7f00000002c0)="d34273aabaa8617e371f2b36efeeb6d81e96190af67b8efbe7ade9ab66f4118e30193eeec8b4e9b5e5a53e7d753d25055b010d6b8a9ad8a0964b5328babed311a12c011319c960009bb83107e7d0a8fc97e55137ac6fbf81", 0x58) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3ffbd) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x9, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 13:13:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x54833, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x80086601, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800), 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) fchownat(r4, 0x0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 13:13:41 executing program 4: r0 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xc, 0x0, 0x0) 13:13:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)='deSC', 0x3) write(r0, &(0x7f0000000000)="ff", 0xfffffeed) fcntl$addseals(r0, 0x409, 0x8) 13:13:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 13:13:41 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffdb) fcntl$addseals(r3, 0x409, 0x8) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) tkill(r0, 0x1000000000013) 13:13:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x9, 0x0, 0x98) 13:13:42 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid/\xbb\xbd\x1cf\xa5\x93\x16\xbc2\xcf-\x9e=\x00') 13:13:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf84b}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 13:13:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x18, 0x1}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 13:13:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x1}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x00Jk\x00'}) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev, 'tunl0\x00'}}, 0x1e) 13:13:42 executing program 5: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="25bca274769e620aa734fa0095e0612687463915e38802a9d8a6a872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0']) 13:13:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x40802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0xffffffc8}) 13:13:42 executing program 4: accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 503.608669][T15565] netlink: 'syz-executor.1': attribute type 24 has an invalid length. [ 503.663633][T15571] usb usb2: usbfs: process 15571 (syz-executor.3) did not claim interface 0 before use [ 503.666336][T15565] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 13:13:42 executing program 3: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'\x00yz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbevv\xe3\x98\x83Gv\x00'}, 0x45c) 13:13:42 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x40000100000001, &(0x7f00000001c0)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 503.778056][T15573] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923655384 log_block_size) [ 503.869428][T15565] INFO: trying to register non-static key. [ 503.875533][T15565] the code is fine but needs lockdep annotation. [ 503.881861][T15565] turning off the locking correctness validator. [ 503.888208][T15565] CPU: 1 PID: 15565 Comm: syz-executor.1 Not tainted 5.4.0-rc5-next-20191029 #0 [ 503.897413][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.902278][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 503.907725][T15565] Call Trace: 13:13:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 503.915099][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 503.918091][T15565] dump_stack+0x172/0x1f0 [ 503.918110][T15565] register_lock_class+0x179e/0x1850 [ 503.918124][T15565] ? unwind_get_return_address+0x61/0xa0 [ 503.918138][T15565] ? profile_setup.cold+0xbb/0xbb [ 503.918156][T15565] ? arch_stack_walk+0x97/0xf0 [ 503.953954][T15565] ? is_dynamic_key+0x1c0/0x1c0 [ 503.958811][T15565] __lock_acquire+0xf4/0x4a00 [ 503.963491][T15565] ? kasan_kmalloc+0x9/0x10 [ 503.967996][T15565] ? kmem_cache_alloc_node_trace+0x15a/0x750 [ 503.974070][T15565] ? __kmalloc_node+0x3d/0x70 [ 503.978735][T15565] ? kvmalloc_node+0x68/0x100 [ 503.983429][T15565] ? alloc_netdev_mqs+0x8b4/0xde0 [ 503.988490][T15565] ? rtnl_create_link+0x22d/0xab0 [ 503.993501][T15565] ? mark_held_locks+0xf0/0xf0 [ 503.998706][T15565] ? kasan_kmalloc+0x9/0x10 [ 504.003195][T15565] ? __kmalloc_node+0x4e/0x70 [ 504.007852][T15565] ? kvmalloc_node+0x68/0x100 [ 504.012686][T15565] ? alloc_netdev_mqs+0x8b4/0xde0 [ 504.017863][T15565] ? rtnl_create_link+0x22d/0xab0 [ 504.023130][T15565] ? __rtnl_newlink+0xfa3/0x16e0 [ 504.028049][T15565] ? rtnl_newlink+0x69/0xa0 [ 504.032562][T15565] ? rtnetlink_rcv_msg+0x45e/0xaf0 [ 504.037664][T15565] lock_acquire+0x190/0x410 [ 504.042345][T15565] ? bond_3ad_update_ad_actor_settings+0x37b/0x7b0 [ 504.049180][T15565] _raw_spin_lock_bh+0x33/0x50 [ 504.053933][T15565] ? bond_3ad_update_ad_actor_settings+0x37b/0x7b0 [ 504.060416][T15565] bond_3ad_update_ad_actor_settings+0x37b/0x7b0 [ 504.066992][T15565] ? bond_3ad_bind_slave+0x12e0/0x12e0 [ 504.072782][T15565] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 504.078743][T15565] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 504.084577][T15565] bond_option_ad_actor_sys_prio_set+0x67/0x80 [ 504.090714][T15565] __bond_opt_set+0x2a1/0x540 [ 504.095378][T15565] bond_changelink+0x14ed/0x1bd0 [ 504.100305][T15565] ? memset+0x32/0x40 [ 504.104535][T15565] ? bond_slave_changelink+0x1e0/0x1e0 [ 504.109985][T15565] bond_newlink+0x2d/0x90 [ 504.114404][T15565] ? bond_changelink+0x1bd0/0x1bd0 [ 504.119499][T15565] __rtnl_newlink+0x10a1/0x16e0 [ 504.124521][T15565] ? rtnl_link_unregister+0x250/0x250 [ 504.129877][T15565] ? is_bpf_text_address+0xce/0x160 [ 504.135056][T15565] ? kernel_text_address+0x73/0xf0 [ 504.140147][T15565] ? unwind_get_return_address+0x61/0xa0 [ 504.145767][T15565] ? profile_setup.cold+0xbb/0xbb [ 504.151554][T15565] ? arch_stack_walk+0x97/0xf0 [ 504.156822][T15565] ? stack_trace_save+0xac/0xe0 [ 504.161655][T15565] ? stack_trace_consume_entry+0x190/0x190 [ 504.167444][T15565] ? mark_lock+0xc2/0x1220 [ 504.171931][T15565] ? save_stack+0x5c/0x90 [ 504.176673][T15565] ? save_stack+0x23/0x90 [ 504.180984][T15565] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 504.186782][T15565] ? kasan_kmalloc+0x9/0x10 [ 504.191265][T15565] ? kmem_cache_alloc_trace+0x158/0x790 [ 504.196841][T15565] ? rtnl_newlink+0x4b/0xa0 [ 504.201328][T15565] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 504.206860][T15565] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 504.212831][T15565] rtnl_newlink+0x69/0xa0 [ 504.217144][T15565] ? __rtnl_newlink+0x16e0/0x16e0 [ 504.222157][T15565] rtnetlink_rcv_msg+0x45e/0xaf0 [ 504.227097][T15565] ? rtnl_bridge_getlink+0x910/0x910 [ 504.232446][T15565] ? netlink_deliver_tap+0x228/0xbe0 [ 504.237724][T15565] ? find_held_lock+0x35/0x130 [ 504.242730][T15565] netlink_rcv_skb+0x177/0x450 [ 504.247473][T15565] ? rtnl_bridge_getlink+0x910/0x910 [ 504.252939][T15565] ? netlink_ack+0xb50/0xb50 [ 504.257507][T15565] ? __kasan_check_read+0x11/0x20 [ 504.262521][T15565] ? netlink_deliver_tap+0x24a/0xbe0 [ 504.267788][T15565] rtnetlink_rcv+0x1d/0x30 [ 504.272277][T15565] netlink_unicast+0x531/0x710 [ 504.277028][T15565] ? netlink_attachskb+0x7c0/0x7c0 [ 504.282128][T15565] ? _copy_from_iter_full+0x25d/0x8c0 [ 504.287492][T15565] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 504.293203][T15565] ? __check_object_size+0x3d/0x437 [ 504.298400][T15565] netlink_sendmsg+0x8cf/0xda0 [ 504.303146][T15565] ? netlink_unicast+0x710/0x710 [ 504.308123][T15565] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 504.313997][T15565] ? apparmor_socket_sendmsg+0x2a/0x30 [ 504.319436][T15565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.325656][T15565] ? security_socket_sendmsg+0x8d/0xc0 [ 504.331118][T15565] ? netlink_unicast+0x710/0x710 [ 504.336770][T15565] sock_sendmsg+0xd7/0x130 [ 504.341176][T15565] ___sys_sendmsg+0x803/0x920 [ 504.345834][T15565] ? copy_msghdr_from_user+0x440/0x440 [ 504.351291][T15565] ? __kasan_check_read+0x11/0x20 [ 504.356472][T15565] ? __fget+0x37f/0x550 [ 504.360614][T15565] ? ksys_dup3+0x3e0/0x3e0 [ 504.365013][T15565] ? __fget_light+0x1a9/0x230 [ 504.369668][T15565] ? __fdget+0x1b/0x20 [ 504.373806][T15565] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 504.380417][T15565] __sys_sendmsg+0x105/0x1d0 [ 504.385000][T15565] ? __sys_sendmsg_sock+0xd0/0xd0 [ 504.390031][T15565] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 504.395479][T15565] ? do_syscall_64+0x26/0x760 [ 504.400144][T15565] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.406590][T15565] ? do_syscall_64+0x26/0x760 [ 504.411257][T15565] __x64_sys_sendmsg+0x78/0xb0 [ 504.416015][T15565] do_syscall_64+0xfa/0x760 [ 504.420595][T15565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.426468][T15565] RIP: 0033:0x459f49 [ 504.431052][T15565] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.451016][T15565] RSP: 002b:00007fd7b4870c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.459418][T15565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 504.467377][T15565] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 504.475329][T15565] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.483283][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7b48716d4 [ 504.491234][T15565] R13: 00000000004c8338 R14: 00000000004de608 R15: 00000000ffffffff 13:13:43 executing program 5: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="25bca274769e620aa734fa0095e0612687463915e38802a9d8a6a872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0']) 13:13:43 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 504.541781][T15573] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 504.549082][T15573] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 504.609932][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 504.610912][T15602] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 504.619960][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 504.627121][T15602] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' 13:13:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 504.652043][T15602] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923655384 log_block_size) [ 504.703800][T15602] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 504.711351][T15602] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 504.726246][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 504.736101][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 504.738292][T15606] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env 13:13:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 504.818986][T15606] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 504.859896][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 504.924344][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 504.942939][T15606] gfs2: not a GFS2 filesystem 13:13:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) 13:13:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) 13:13:43 executing program 5: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="25bca274769e620aa734fa0095e0612687463915e38802a9d8a6a872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0']) [ 504.964972][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 504.976695][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 504.991824][T15606] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.011196][T15606] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.049703][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 505.066749][T15623] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 505.067709][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 505.079484][T15623] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 505.109441][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env 13:13:43 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 505.123148][T15623] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923655384 log_block_size) [ 505.138646][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.181947][T15634] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.189534][T15634] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.268604][T15623] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 505.283623][T15623] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 505.302231][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 505.304398][T15634] gfs2: not a GFS2 filesystem [ 505.309422][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 505.310641][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 505.351916][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' 13:13:44 executing program 3: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) 13:13:44 executing program 5: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="25bca274769e620aa734fa0095e0612687463915e38802a9d8a6a872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='inode_readahead_blks=0']) 13:13:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 505.372396][T15634] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.396968][T15634] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 505.432125][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 505.439312][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' 13:13:44 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) 13:13:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 505.490395][T15653] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 505.502033][T15653] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 505.530445][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env 13:13:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) [ 505.547257][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 505.580561][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env 13:13:44 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:44 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 505.601862][T15653] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923655384 log_block_size) [ 505.628570][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' 13:13:44 executing program 1: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 505.655633][T15659] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.680427][T15659] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.681920][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 505.730127][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 505.742298][T15653] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 505.743403][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 505.749649][T15653] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 505.757374][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 505.788282][T15659] gfs2: not a GFS2 filesystem 13:13:44 executing program 5: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 505.837835][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 505.851547][T15659] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.861473][T15659] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.863858][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 505.924723][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.938855][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 505.969448][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 505.984323][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:45 executing program 3: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:45 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 506.302878][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 506.310773][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 506.319499][T15692] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.332190][T15692] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.395448][T15692] gfs2: not a GFS2 filesystem 13:13:45 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 506.451342][T15692] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.459034][T15692] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.482675][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 506.489867][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' 13:13:45 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 506.562126][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.569452][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:45 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:45 executing program 1: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 506.641555][T15706] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.649485][T15706] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.662659][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 506.671663][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' 13:13:45 executing program 5: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 506.691224][T15706] gfs2: not a GFS2 filesystem [ 506.699112][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 506.726024][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 506.773069][T15706] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.780504][T15706] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.812107][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 506.819489][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 506.857357][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env 13:13:45 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 506.882619][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.926919][T15724] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 506.935639][T15724] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 506.975246][T15724] gfs2: not a GFS2 filesystem [ 507.031973][T15724] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.039697][T15724] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:45 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) pipe(0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@suiddir='suiddir'}, {@discard='discard'}, {@quota='quota'}, {@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, 'devtmpfs\x00'}}, {@barrier='barrier'}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 507.107575][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.115213][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 507.136010][T15732] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.143925][T15732] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:45 executing program 3: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 507.182591][T15732] gfs2: not a GFS2 filesystem [ 507.241495][T15732] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.248888][T15732] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 507.261684][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 507.269261][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' 13:13:46 executing program 2: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 13:13:46 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) [ 507.360232][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 507.373839][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 507.413632][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.420927][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:46 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) 13:13:46 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 507.486720][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.500439][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:46 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) 13:13:46 executing program 1: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 507.532464][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 507.554041][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' 13:13:46 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) 13:13:46 executing program 5: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) read$eventfd(r1, &(0x7f00000000c0), 0xfffffeba) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10900, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) read$eventfd(r1, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbf32dcaaac00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/21, 0x15}}], 0x1, 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 507.591153][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 507.609656][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 507.671108][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.678292][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 507.690388][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 507.697944][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' 13:13:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 507.740580][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 507.758063][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 507.761347][T15769] kobject: 'input16' (00000000c220527b): kobject_add_internal: parent: 'input', set: 'devices' [ 507.781653][T15769] kobject: 'input16' (00000000c220527b): kobject_uevent_env [ 507.789886][T15769] kobject: 'input16' (00000000c220527b): fill_kobj_path: path = '/devices/virtual/input/input16' [ 507.801231][T15769] kobject: 'input16' (00000000c220527b): fill_kobj_path: path = '/devices/virtual/input/input16' [ 507.812648][T15769] input: syz1 as /devices/virtual/input/input16 [ 507.819415][T15769] kobject: 'event4' (00000000e893dc92): kobject_add_internal: parent: 'input16', set: 'devices' [ 507.830529][T15769] kobject: 'event4' (00000000e893dc92): kobject_uevent_env [ 507.838035][T15769] kobject: 'event4' (00000000e893dc92): fill_kobj_path: path = '/devices/virtual/input/input16/event4' [ 507.861740][T15769] kobject: 'event4' (00000000e893dc92): kobject_uevent_env [ 507.869262][T15769] kobject: 'event4' (00000000e893dc92): fill_kobj_path: path = '/devices/virtual/input/input16/event4' [ 507.880813][T15769] kobject: '(null)' (00000000d0ba3db5): kobject_cleanup, parent 00000000e893dc92 [ 507.890827][T15769] kobject: '(null)' (00000000d0ba3db5): calling ktype release [ 507.931143][T15769] kobject: 'event4' (00000000e893dc92): kobject_cleanup, parent 000000004843b88b [ 507.941118][T15769] kobject: 'event4' (00000000e893dc92): calling ktype release [ 507.948693][T15769] kobject: 'event4': free name [ 507.954060][T15769] kobject: 'input16' (00000000c220527b): kobject_uevent_env [ 507.961457][T15769] kobject: 'input16' (00000000c220527b): fill_kobj_path: path = '/devices/virtual/input/input16' [ 507.972349][T15769] kobject: 'input16' (00000000c220527b): kobject_cleanup, parent 000000004843b88b [ 507.983293][T15769] kobject: 'input16' (00000000c220527b): calling ktype release [ 507.990873][T15769] kobject: 'input16': free name [ 507.998858][T15772] kobject: 'input17' (000000006f53e30e): kobject_add_internal: parent: 'input', set: 'devices' [ 508.009830][T15772] kobject: 'input17' (000000006f53e30e): kobject_uevent_env [ 508.017572][T15772] kobject: 'input17' (000000006f53e30e): fill_kobj_path: path = '/devices/virtual/input/input17' [ 508.029877][T15772] kobject: 'input17' (000000006f53e30e): fill_kobj_path: path = '/devices/virtual/input/input17' [ 508.040741][T15772] input: syz1 as /devices/virtual/input/input17 [ 508.047369][T15772] kobject: 'event4' (00000000c76b6316): kobject_add_internal: parent: 'input17', set: 'devices' [ 508.059330][T15772] kobject: 'event4' (00000000c76b6316): kobject_uevent_env [ 508.067248][T15772] kobject: 'event4' (00000000c76b6316): fill_kobj_path: path = '/devices/virtual/input/input17/event4' [ 508.080636][T15774] kobject: 'event4' (00000000c76b6316): kobject_uevent_env 13:13:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r3, @ANYBLOB="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"], 0x42e}}, 0x0) [ 508.090568][T15774] kobject: 'event4' (00000000c76b6316): fill_kobj_path: path = '/devices/virtual/input/input17/event4' [ 508.105565][T15774] kobject: '(null)' (00000000ee40649a): kobject_cleanup, parent 00000000c76b6316 [ 508.115064][T15774] kobject: '(null)' (00000000ee40649a): calling ktype release [ 508.129481][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env 13:13:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r3, @ANYBLOB="940c6e000a000200aaaaaaaaaa0c001f010000004f1c2b52760000000048aa91ee71c105e6c9de7b24c97c65648b72c6e18f373e45991720b65fefedd3e6a4bf136854a948b38b4bd646faef1fc5e157cb5f83398f282f690e8bfbfd7bee1be60365f3a623f2699f833ffd221b7d0200000042064e0c308c723cd601869b7a736d001000000000000056dd32cd1ee9a41210fdb278b50e7328efd316c523c74ec8bb1c0b35ec9f32a847341e7488cbce5dcccc4ccd99af50b548b7d697d4eb4bc77df6a67375751627e602f988768108dd16b2bbc9884f0e19126d1333cc435f93a5c9d90f5cdafeedb7d5f7081fbea110386036db1a2b22d7d3931791ce50cf3f0000000000000000000000000000b24513be63c4b7ad03008d2aa97d0f8da23e6bfe694eb43dbfdd26c82d46cd334cedd299756099ff781a95d779c1bfefe9f4d9bbcc16dac0c696cfda193554c9361e2ad446dbc46db90651df1f53c39b1a282f70e08bc29f7ee35f702917545d971a5c1ff155e5febd883da1cdd012bdfe21f47f494b637ac3a954ad98defa7c20fece27f319e3fdbfd4fd8912843abf22a4dbe6ca423d01187bce636a2d291af687175f1d616c27fdb1624f8966eff6"], 0x42e}}, 0x0) [ 508.136847][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 508.151399][T15774] kobject: 'event4' (00000000c76b6316): kobject_cleanup, parent 000000004843b88b [ 508.165276][T15774] kobject: 'event4' (00000000c76b6316): calling ktype release [ 508.177945][T15774] kobject: 'event4': free name [ 508.184821][T15774] kobject: 'input17' (000000006f53e30e): kobject_uevent_env 13:13:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gqnoenforce='gqnoenforce'}]}) [ 508.184857][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 508.192454][T15774] kobject: 'input17' (000000006f53e30e): fill_kobj_path: path = '/devices/virtual/input/input17' [ 508.210532][T15774] kobject: 'input17' (000000006f53e30e): kobject_cleanup, parent 000000004843b88b [ 508.215739][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 508.229343][T15774] kobject: 'input17' (000000006f53e30e): calling ktype release 13:13:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r3, @ANYBLOB="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"], 0x42e}}, 0x0) 13:13:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 508.247102][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 508.251956][T15774] kobject: 'input17': free name [ 508.259577][T15785] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 508.263797][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 508.272599][T15785] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' 13:13:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 508.309945][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 508.317426][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 508.351846][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 508.359116][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 508.364528][T15792] kobject: 'input18' (000000008fc35d5b): kobject_add_internal: parent: 'input', set: 'devices' [ 508.381617][T15792] kobject: 'input18' (000000008fc35d5b): kobject_uevent_env [ 508.389461][T15792] kobject: 'input18' (000000008fc35d5b): fill_kobj_path: path = '/devices/virtual/input/input18' [ 508.403492][T15792] kobject: 'input18' (000000008fc35d5b): fill_kobj_path: path = '/devices/virtual/input/input18' [ 508.416015][T15792] input: syz1 as /devices/virtual/input/input18 [ 508.423309][T15792] kobject: 'event4' (000000000de09897): kobject_add_internal: parent: 'input18', set: 'devices' [ 508.434850][T15792] kobject: 'event4' (000000000de09897): kobject_uevent_env 13:13:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 508.444443][T15792] kobject: 'event4' (000000000de09897): fill_kobj_path: path = '/devices/virtual/input/input18/event4' [ 508.459183][T15785] XFS (loop2): Invalid superblock magic number [ 508.467406][T15801] kobject: 'event4' (000000000de09897): kobject_uevent_env [ 508.475157][T15801] kobject: 'event4' (000000000de09897): fill_kobj_path: path = '/devices/virtual/input/input18/event4' [ 508.490086][T15801] kobject: '(null)' (00000000aa1a2d31): kobject_cleanup, parent 000000000de09897 [ 508.501525][T15801] kobject: '(null)' (00000000aa1a2d31): calling ktype release [ 508.521474][T15802] kobject: 'input19' (00000000ed88642b): kobject_add_internal: parent: 'input', set: 'devices' [ 508.541216][T15801] kobject: 'event4' (000000000de09897): kobject_cleanup, parent 000000004843b88b 13:13:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 508.551474][T15802] kobject: 'input19' (00000000ed88642b): kobject_uevent_env [ 508.553721][T15801] kobject: 'event4' (000000000de09897): calling ktype release [ 508.558803][T15802] kobject: 'input19' (00000000ed88642b): fill_kobj_path: path = '/devices/virtual/input/input19' [ 508.558970][T15802] kobject: 'input19' (00000000ed88642b): fill_kobj_path: path = '/devices/virtual/input/input19' [ 508.569083][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 508.596552][T15802] input: syz1 as /devices/virtual/input/input19 13:13:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c000729d50000000000000007008000", @ANYRES32=r3, @ANYBLOB="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"], 0x42e}}, 0x0) [ 508.614756][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 508.637850][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 508.641895][T15801] kobject: 'event4': free name [ 508.649697][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 508.666070][T15802] kobject: 'event4' (00000000bb692771): kobject_add_internal: parent: 'input19', set: 'devices' [ 508.666139][T15801] kobject: 'input18' (000000008fc35d5b): kobject_uevent_env [ 508.696393][T15802] kobject: 'event4' (00000000bb692771): kobject_uevent_env [ 508.696679][T15811] kobject: 'input20' (00000000f771c6eb): kobject_add_internal: parent: 'input', set: 'devices' [ 508.711983][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 508.726355][T15814] kobject: 'input21' (000000000d694591): kobject_add_internal: parent: 'input', set: 'devices' [ 508.727120][T15802] kobject: 'event4' (00000000bb692771): fill_kobj_path: path = '/devices/virtual/input/input19/event4' [ 508.749511][T15814] kobject: 'input21' (000000000d694591): kobject_uevent_env [ 508.761532][T15811] kobject: 'input20' (00000000f771c6eb): kobject_uevent_env [ 508.765739][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 508.770041][T15801] kobject: 'input18' (000000008fc35d5b): fill_kobj_path: path = '/devices/virtual/input/input18' [ 508.793606][T15785] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env 13:13:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 508.807316][T15785] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 508.814688][T15814] kobject: 'input21' (000000000d694591): fill_kobj_path: path = '/devices/virtual/input/input21' [ 508.829249][T15794] kobject: 'event4' (00000000bb692771): kobject_uevent_env [ 508.840082][T15811] kobject: 'input20' (00000000f771c6eb): fill_kobj_path: path = '/devices/virtual/input/input20' [ 508.841425][T15794] kobject: 'event4' (00000000bb692771): fill_kobj_path: path = '/devices/virtual/input/input19/event4' [ 508.853236][T15811] kobject: 'input20' (00000000f771c6eb): fill_kobj_path: path = '/devices/virtual/input/input20' 13:13:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gqnoenforce='gqnoenforce'}]}) [ 508.910458][T15794] kobject: '(null)' (00000000ad16ea9a): kobject_cleanup, parent 00000000bb692771 [ 508.914941][T15828] kobject: 'input22' (00000000d9e00ab0): kobject_add_internal: parent: 'input', set: 'devices' [ 508.936769][T15811] input: syz1 as /devices/virtual/input/input20 [ 508.941424][T15814] kobject: 'input21' (000000000d694591): fill_kobj_path: path = '/devices/virtual/input/input21' [ 508.943288][T15801] kobject: 'input18' (000000008fc35d5b): kobject_cleanup, parent 000000004843b88b [ 508.959622][T15794] kobject: '(null)' (00000000ad16ea9a): calling ktype release [ 508.971627][T15828] kobject: 'input22' (00000000d9e00ab0): kobject_uevent_env [ 508.978445][T15811] kobject: 'input20' (00000000f771c6eb): kobject_uevent_env [ 508.980101][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 508.998669][T15811] kobject: 'input20' (00000000f771c6eb): fill_kobj_path: path = '/devices/virtual/input/input20' [ 509.014468][T15811] kobject: 'input20' (00000000f771c6eb): kobject_cleanup, parent 000000004843b88b [ 509.016728][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 509.023967][T15814] input: syz1 as /devices/virtual/input/input21 [ 509.034624][T15828] kobject: 'input22' (00000000d9e00ab0): fill_kobj_path: path = '/devices/virtual/input/input22' [ 509.040439][T15834] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 509.061679][T15811] kobject: 'input20' (00000000f771c6eb): calling ktype release [ 509.069509][T15801] kobject: 'input18' (000000008fc35d5b): calling ktype release [ 509.075716][T15828] kobject: 'input22' (00000000d9e00ab0): fill_kobj_path: path = '/devices/virtual/input/input22' [ 509.080028][T15814] kobject: 'input21' (000000000d694591): kobject_uevent_env [ 509.095482][T15794] kobject: 'event4' (00000000bb692771): kobject_cleanup, parent 000000004843b88b [ 509.102955][T15811] kobject: 'input20': free name 13:13:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.106375][T15828] input: syz1 as /devices/virtual/input/input22 [ 509.115851][T15794] kobject: 'event4' (00000000bb692771): calling ktype release [ 509.124987][T15834] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 509.136689][T15794] kobject: 'event4': free name [ 509.137573][T15801] kobject: 'input18': free name [ 509.144055][T15828] kobject: 'input22' (00000000d9e00ab0): kobject_uevent_env 13:13:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.156202][T15814] kobject: 'input21' (000000000d694591): fill_kobj_path: path = '/devices/virtual/input/input21' [ 509.171919][T15794] kobject: 'input19' (00000000ed88642b): kobject_uevent_env [ 509.183852][T15814] kobject: 'input21' (000000000d694591): kobject_cleanup, parent 000000004843b88b [ 509.194411][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 509.207739][T15828] kobject: 'input22' (00000000d9e00ab0): fill_kobj_path: path = '/devices/virtual/input/input22' [ 509.209119][T15794] kobject: 'input19' (00000000ed88642b): fill_kobj_path: path = '/devices/virtual/input/input19' [ 509.219723][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 509.234593][T15842] kobject: 'input23' (00000000ad805fe1): kobject_add_internal: parent: 'input', set: 'devices' [ 509.261300][T15794] kobject: 'input19' (00000000ed88642b): kobject_cleanup, parent 000000004843b88b [ 509.271453][T15846] kobject: 'input24' (000000005dc28e47): kobject_add_internal: parent: 'input', set: 'devices' [ 509.283059][T15842] kobject: 'input23' (00000000ad805fe1): kobject_uevent_env [ 509.283162][T15794] kobject: 'input19' (00000000ed88642b): calling ktype release [ 509.290377][T15842] kobject: 'input23' (00000000ad805fe1): fill_kobj_path: path = '/devices/virtual/input/input23' 13:13:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.291477][T15828] kobject: 'input22' (00000000d9e00ab0): kobject_cleanup, parent 000000004843b88b [ 509.301487][T15794] kobject: 'input19': free name [ 509.308631][T15814] kobject: 'input21' (000000000d694591): calling ktype release [ 509.321242][T15834] XFS (loop2): Invalid superblock magic number [ 509.323001][T15842] kobject: 'input23' (00000000ad805fe1): fill_kobj_path: path = '/devices/virtual/input/input23' [ 509.349655][T15846] kobject: 'input24' (000000005dc28e47): kobject_uevent_env [ 509.351514][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 509.364858][T15828] kobject: 'input22' (00000000d9e00ab0): calling ktype release [ 509.367563][T15846] kobject: 'input24' (000000005dc28e47): fill_kobj_path: path = '/devices/virtual/input/input24' [ 509.374171][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 509.395259][T15814] kobject: 'input21': free name [ 509.400191][T15828] kobject: 'input22': free name [ 509.419792][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 509.425235][T15856] kobject: 'input25' (00000000f479a792): kobject_add_internal: parent: 'input', set: 'devices' [ 509.435804][T15846] kobject: 'input24' (000000005dc28e47): fill_kobj_path: path = '/devices/virtual/input/input24' [ 509.439805][T15856] kobject: 'input25' (00000000f479a792): kobject_uevent_env [ 509.458165][T15856] kobject: 'input25' (00000000f479a792): fill_kobj_path: path = '/devices/virtual/input/input25' 13:13:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:13:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.460405][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 509.469299][T15856] kobject: 'input25' (00000000f479a792): fill_kobj_path: path = '/devices/virtual/input/input25' [ 509.492559][T15846] input: syz1 as /devices/virtual/input/input24 [ 509.499519][T15846] kobject: 'event4' (00000000e4fda556): kobject_add_internal: parent: 'input24', set: 'devices' [ 509.510664][T15842] input: syz1 as /devices/virtual/input/input23 [ 509.521693][T15842] kobject: 'input23' (00000000ad805fe1): kobject_uevent_env [ 509.529127][T15842] kobject: 'input23' (00000000ad805fe1): fill_kobj_path: path = '/devices/virtual/input/input23' [ 509.543028][T15856] input: syz1 as /devices/virtual/input/input25 [ 509.546578][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 509.549532][T15842] kobject: 'input23' (00000000ad805fe1): kobject_cleanup, parent 000000004843b88b [ 509.578987][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 509.582043][T15864] kobject: 'input26' (00000000f4f34b41): kobject_add_internal: parent: 'input', set: 'devices' [ 509.597489][T15863] kobject: 'input27' (00000000c51eaba5): kobject_add_internal: parent: 'input', set: 'devices' [ 509.603179][T15842] kobject: 'input23' (00000000ad805fe1): calling ktype release [ 509.611351][T15846] kobject: 'event4' (00000000e4fda556): kobject_uevent_env [ 509.621587][T15864] kobject: 'input26' (00000000f4f34b41): kobject_uevent_env [ 509.627135][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 509.635622][T15863] kobject: 'input27' (00000000c51eaba5): kobject_uevent_env [ 509.640954][T15846] kobject: 'event4' (00000000e4fda556): fill_kobj_path: path = '/devices/virtual/input/input24/event4' [ 509.651459][T15856] kobject: 'input25' (00000000f479a792): kobject_uevent_env [ 509.660824][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 509.669672][T15842] kobject: 'input23': free name [ 509.684034][T15834] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 509.691999][T15864] kobject: 'input26' (00000000f4f34b41): fill_kobj_path: path = '/devices/virtual/input/input26' [ 509.718556][T15856] kobject: 'input25' (00000000f479a792): fill_kobj_path: path = '/devices/virtual/input/input25' [ 509.734818][T15834] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 509.740844][T15844] kobject: 'event4' (00000000e4fda556): kobject_uevent_env [ 509.751492][T15864] kobject: 'input26' (00000000f4f34b41): fill_kobj_path: path = '/devices/virtual/input/input26' [ 509.771105][T15844] kobject: 'event4' (00000000e4fda556): fill_kobj_path: path = '/devices/virtual/input/input24/event4' [ 509.784823][T15863] kobject: 'input27' (00000000c51eaba5): fill_kobj_path: path = '/devices/virtual/input/input27' [ 509.812464][T15856] kobject: 'input25' (00000000f479a792): kobject_cleanup, parent 000000004843b88b [ 509.826561][T15844] kobject: '(null)' (00000000d7896e2c): kobject_cleanup, parent 00000000e4fda556 13:13:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.841883][T15864] input: syz1 as /devices/virtual/input/input26 [ 509.857724][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 509.861065][T15844] kobject: '(null)' (00000000d7896e2c): calling ktype release [ 509.872771][T15856] kobject: 'input25' (00000000f479a792): calling ktype release [ 509.882178][T15864] kobject: 'input26' (00000000f4f34b41): kobject_uevent_env [ 509.901485][T15863] kobject: 'input27' (00000000c51eaba5): fill_kobj_path: path = '/devices/virtual/input/input27' [ 509.912757][T15856] kobject: 'input25': free name [ 509.915532][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 509.917905][T15864] kobject: 'input26' (00000000f4f34b41): fill_kobj_path: path = '/devices/virtual/input/input26' [ 509.934632][T15884] kobject: 'input28' (00000000af3193fd): kobject_add_internal: parent: 'input', set: 'devices' 13:13:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gqnoenforce='gqnoenforce'}]}) [ 509.940793][T15864] kobject: 'input26' (00000000f4f34b41): kobject_cleanup, parent 000000004843b88b [ 509.965997][T15863] input: syz1 as /devices/virtual/input/input27 [ 509.973341][T15864] kobject: 'input26' (00000000f4f34b41): calling ktype release [ 509.985867][T15863] kobject: 'input27' (00000000c51eaba5): kobject_uevent_env 13:13:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 509.993330][T15844] kobject: 'event4' (00000000e4fda556): kobject_cleanup, parent 000000004843b88b [ 510.003420][T15864] kobject: 'input26': free name [ 510.014527][T15844] kobject: 'event4' (00000000e4fda556): calling ktype release [ 510.022584][T15884] kobject: 'input28' (00000000af3193fd): kobject_uevent_env [ 510.028173][T15888] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 510.037946][T15844] kobject: 'event4': free name [ 510.041448][T15863] kobject: 'input27' (00000000c51eaba5): fill_kobj_path: path = '/devices/virtual/input/input27' [ 510.043272][T15844] kobject: 'input24' (000000005dc28e47): kobject_uevent_env [ 510.053397][T15888] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 510.060976][T15844] kobject: 'input24' (000000005dc28e47): fill_kobj_path: path = '/devices/virtual/input/input24' [ 510.084903][T15844] kobject: 'input24' (000000005dc28e47): kobject_cleanup, parent 000000004843b88b [ 510.090810][T15863] kobject: 'input27' (00000000c51eaba5): kobject_cleanup, parent 000000004843b88b [ 510.094533][T15844] kobject: 'input24' (000000005dc28e47): calling ktype release [ 510.106848][T15884] kobject: 'input28' (00000000af3193fd): fill_kobj_path: path = '/devices/virtual/input/input28' [ 510.111312][T15844] kobject: 'input24': free name [ 510.126313][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 510.140656][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' 13:13:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 510.157911][T15895] kobject: 'input29' (000000009b01ba91): kobject_add_internal: parent: 'input', set: 'devices' [ 510.170051][T15895] kobject: 'input29' (000000009b01ba91): kobject_uevent_env [ 510.177996][T15895] kobject: 'input29' (000000009b01ba91): fill_kobj_path: path = '/devices/virtual/input/input29' [ 510.194131][T15895] kobject: 'input29' (000000009b01ba91): fill_kobj_path: path = '/devices/virtual/input/input29' [ 510.208696][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 510.212946][T15895] input: syz1 as /devices/virtual/input/input29 [ 510.220783][T15863] kobject: 'input27' (00000000c51eaba5): calling ktype release [ 510.222959][T15888] XFS (loop2): Invalid superblock magic number [ 510.233502][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 510.243089][T15895] kobject: 'event4' (000000002eda3374): kobject_add_internal: parent: 'input29', set: 'devices' 13:13:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 510.247337][T15863] kobject: 'input27': free name [ 510.262802][T15904] kobject: 'input30' (00000000df906522): kobject_add_internal: parent: 'input', set: 'devices' [ 510.271504][T15884] kobject: 'input28' (00000000af3193fd): fill_kobj_path: path = '/devices/virtual/input/input28' [ 510.283987][T15904] kobject: 'input30' (00000000df906522): kobject_uevent_env [ 510.293002][T15895] kobject: 'event4' (000000002eda3374): kobject_uevent_env [ 510.300262][T15895] kobject: 'event4' (000000002eda3374): fill_kobj_path: path = '/devices/virtual/input/input29/event4' [ 510.311976][T15904] kobject: 'input30' (00000000df906522): fill_kobj_path: path = '/devices/virtual/input/input30' [ 510.323305][T15904] kobject: 'input30' (00000000df906522): fill_kobj_path: path = '/devices/virtual/input/input30' [ 510.329430][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 510.330149][T15908] kobject: 'input31' (00000000065d09e4): kobject_add_internal: parent: 'input', set: 'devices' [ 510.341163][T15906] kobject: 'event4' (000000002eda3374): kobject_uevent_env [ 510.353862][T15906] kobject: 'event4' (000000002eda3374): fill_kobj_path: path = '/devices/virtual/input/input29/event4' [ 510.362069][T15904] input: syz1 as /devices/virtual/input/input30 [ 510.379593][T15906] kobject: '(null)' (00000000716cee7a): kobject_cleanup, parent 000000002eda3374 [ 510.388757][T15906] kobject: '(null)' (00000000716cee7a): calling ktype release [ 510.392090][T15884] input: syz1 as /devices/virtual/input/input28 [ 510.396648][T15908] kobject: 'input31' (00000000065d09e4): kobject_uevent_env [ 510.412122][T15908] kobject: 'input31' (00000000065d09e4): fill_kobj_path: path = '/devices/virtual/input/input31' [ 510.427140][T15884] kobject: 'input28' (00000000af3193fd): kobject_uevent_env [ 510.435131][T15904] kobject: 'input30' (00000000df906522): kobject_uevent_env [ 510.435915][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:13:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 510.445193][T15884] kobject: 'input28' (00000000af3193fd): fill_kobj_path: path = '/devices/virtual/input/input28' [ 510.453019][T15906] kobject: 'event4' (000000002eda3374): kobject_cleanup, parent 000000004843b88b [ 510.466973][T15904] kobject: 'input30' (00000000df906522): fill_kobj_path: path = '/devices/virtual/input/input30' [ 510.478421][T15908] kobject: 'input31' (00000000065d09e4): fill_kobj_path: path = '/devices/virtual/input/input31' [ 510.488893][T15884] kobject: 'input28' (00000000af3193fd): kobject_cleanup, parent 000000004843b88b [ 510.509076][T15884] kobject: 'input28' (00000000af3193fd): calling ktype release [ 510.514258][T15906] kobject: 'event4' (000000002eda3374): calling ktype release [ 510.524426][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 510.536205][T15904] kobject: 'input30' (00000000df906522): kobject_cleanup, parent 000000004843b88b [ 510.539241][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 510.550098][T15884] kobject: 'input28': free name [ 510.556081][T15888] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 510.566800][T15904] kobject: 'input30' (00000000df906522): calling ktype release [ 510.572473][T15918] kobject: 'input32' (000000008f40d94b): kobject_add_internal: parent: 'input', set: 'devices' [ 510.586254][T15904] kobject: 'input30': free name [ 510.591209][T15906] kobject: 'event4': free name [ 510.596560][T15906] kobject: 'input29' (000000009b01ba91): kobject_uevent_env 13:13:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 510.609351][T15908] input: syz1 as /devices/virtual/input/input31 [ 510.616993][T15888] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 510.627027][T15918] kobject: 'input32' (000000008f40d94b): kobject_uevent_env [ 510.634849][T15906] kobject: 'input29' (000000009b01ba91): fill_kobj_path: path = '/devices/virtual/input/input29' [ 510.645822][T15908] kobject: 'event4' (000000006049ed34): kobject_add_internal: parent: 'input31', set: 'devices' [ 510.661716][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 510.680672][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' 13:13:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@gqnoenforce='gqnoenforce'}]}) [ 510.721258][T15918] kobject: 'input32' (000000008f40d94b): fill_kobj_path: path = '/devices/virtual/input/input32' [ 510.736950][T15906] kobject: 'input29' (000000009b01ba91): kobject_cleanup, parent 000000004843b88b [ 510.742782][T15927] kobject: 'input33' (00000000d3bf5cb8): kobject_add_internal: parent: 'input', set: 'devices' [ 510.756602][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env 13:13:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 510.756632][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 510.781543][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 510.788738][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 510.789475][T15918] kobject: 'input32' (000000008f40d94b): fill_kobj_path: path = '/devices/virtual/input/input32' [ 510.799181][T15908] kobject: 'event4' (000000006049ed34): kobject_uevent_env [ 510.817547][T15918] input: syz1 as /devices/virtual/input/input32 [ 510.826959][T15927] kobject: 'input33' (00000000d3bf5cb8): kobject_uevent_env [ 510.837680][T15927] kobject: 'input33' (00000000d3bf5cb8): fill_kobj_path: path = '/devices/virtual/input/input33' [ 510.841042][T15906] kobject: 'input29' (000000009b01ba91): calling ktype release [ 510.850428][T15918] kobject: 'input32' (000000008f40d94b): kobject_uevent_env [ 510.869261][T15927] kobject: 'input33' (00000000d3bf5cb8): fill_kobj_path: path = '/devices/virtual/input/input33' [ 510.878986][T15934] kobject: 'input34' (000000006ad1ff9d): kobject_add_internal: parent: 'input', set: 'devices' [ 510.880339][T15918] kobject: 'input32' (000000008f40d94b): fill_kobj_path: path = '/devices/virtual/input/input32' [ 510.897612][T15936] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 510.908294][T15936] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 510.918706][T15908] kobject: 'event4' (000000006049ed34): fill_kobj_path: path = '/devices/virtual/input/input31/event4' [ 510.925504][T15927] input: syz1 as /devices/virtual/input/input33 [ 510.930831][T15934] kobject: 'input34' (000000006ad1ff9d): kobject_uevent_env [ 510.943767][T15934] kobject: 'input34' (000000006ad1ff9d): fill_kobj_path: path = '/devices/virtual/input/input34' [ 510.954728][T15934] kobject: 'input34' (000000006ad1ff9d): fill_kobj_path: path = '/devices/virtual/input/input34' [ 510.965545][T15934] input: syz1 as /devices/virtual/input/input34 [ 510.972151][T15934] kobject: 'event5' (000000005c3eb8f3): kobject_add_internal: parent: 'input34', set: 'devices' [ 510.984171][T15918] kobject: 'input32' (000000008f40d94b): kobject_cleanup, parent 000000004843b88b [ 510.993545][T15934] kobject: 'event5' (000000005c3eb8f3): kobject_uevent_env [ 511.001033][T15934] kobject: 'event5' (000000005c3eb8f3): fill_kobj_path: path = '/devices/virtual/input/input34/event5' [ 511.013001][T15944] kobject: 'event5' (000000005c3eb8f3): kobject_uevent_env [ 511.020410][T15944] kobject: 'event5' (000000005c3eb8f3): fill_kobj_path: path = '/devices/virtual/input/input34/event5' [ 511.034152][T15906] kobject: 'input29': free name [ 511.039307][T15944] kobject: '(null)' (00000000ed4fe97b): kobject_cleanup, parent 000000005c3eb8f3 [ 511.039484][T15936] XFS (loop2): Invalid superblock magic number [ 511.053184][T15944] kobject: '(null)' (00000000ed4fe97b): calling ktype release [ 511.064992][T15927] kobject: 'input33' (00000000d3bf5cb8): kobject_uevent_env [ 511.072540][T15927] kobject: 'input33' (00000000d3bf5cb8): fill_kobj_path: path = '/devices/virtual/input/input33' [ 511.083491][T15927] kobject: 'input33' (00000000d3bf5cb8): kobject_cleanup, parent 000000004843b88b [ 511.092983][T15927] kobject: 'input33' (00000000d3bf5cb8): calling ktype release [ 511.100725][T15927] kobject: 'input33': free name [ 511.106932][T15918] kobject: 'input32' (000000008f40d94b): calling ktype release 13:13:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 511.110361][T15940] kobject: 'input35' (0000000023498aa8): kobject_cleanup, parent 000000004843b88b [ 511.115852][T15918] kobject: 'input32': free name [ 511.141046][T15944] kobject: 'event5' (000000005c3eb8f3): kobject_cleanup, parent 000000004843b88b [ 511.155335][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 511.159490][T15944] kobject: 'event5' (000000005c3eb8f3): calling ktype release [ 511.170288][T15944] kobject: 'event5': free name [ 511.175425][T15944] kobject: 'input34' (000000006ad1ff9d): kobject_uevent_env [ 511.175494][T15907] kobject: 'event4' (000000006049ed34): kobject_uevent_env [ 511.182937][T15944] kobject: 'input34' (000000006ad1ff9d): fill_kobj_path: path = '/devices/virtual/input/input34' [ 511.198999][T15907] kobject: 'event4' (000000006049ed34): fill_kobj_path: path = '/devices/virtual/input/input31/event4' [ 511.201172][T15944] kobject: 'input34' (000000006ad1ff9d): kobject_cleanup, parent 000000004843b88b [ 511.215335][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 511.222104][T15944] kobject: 'input34' (000000006ad1ff9d): calling ktype release [ 511.242014][T15940] kobject: 'input35' (0000000023498aa8): calling ktype release [ 511.246418][T15953] kobject: 'input36' (0000000085e16bd1): kobject_add_internal: parent: 'input', set: 'devices' [ 511.249762][T15944] kobject: 'input34': free name [ 511.263012][T15907] kobject: '(null)' (000000002c50b3c7): kobject_cleanup, parent 000000006049ed34 13:13:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.267608][T15940] kobject: 'input35': free name [ 511.290442][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 511.301466][T15953] kobject: 'input36' (0000000085e16bd1): kobject_uevent_env [ 511.302990][T15907] kobject: '(null)' (000000002c50b3c7): calling ktype release 13:13:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:13:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.321415][T15953] kobject: 'input36' (0000000085e16bd1): fill_kobj_path: path = '/devices/virtual/input/input36' [ 511.323441][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' 13:13:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 511.384898][T15953] kobject: 'input36' (0000000085e16bd1): fill_kobj_path: path = '/devices/virtual/input/input36' [ 511.399635][T15953] input: syz1 as /devices/virtual/input/input36 [ 511.401163][T15907] kobject: 'event4' (000000006049ed34): kobject_cleanup, parent 000000004843b88b [ 511.418104][T15953] kobject: 'input36' (0000000085e16bd1): kobject_uevent_env [ 511.421351][T15936] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env [ 511.429123][T15953] kobject: 'input36' (0000000085e16bd1): fill_kobj_path: path = '/devices/virtual/input/input36' [ 511.441462][T15907] kobject: 'event4' (000000006049ed34): calling ktype release [ 511.443607][T15936] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 511.450899][T15907] kobject: 'event4': free name [ 511.460076][T15907] kobject: 'input31' (00000000065d09e4): kobject_uevent_env [ 511.474556][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 511.487181][T15953] kobject: 'input36' (0000000085e16bd1): kobject_cleanup, parent 000000004843b88b [ 511.510282][T15968] kobject: 'input37' (000000000a7ec035): kobject_add_internal: parent: 'input', set: 'devices' [ 511.517521][T15966] kobject: 'input38' (0000000095135646): kobject_add_internal: parent: 'input', set: 'devices' [ 511.520876][T15907] kobject: 'input31' (00000000065d09e4): fill_kobj_path: path = '/devices/virtual/input/input31' [ 511.551939][T15953] kobject: 'input36' (0000000085e16bd1): calling ktype release [ 511.561483][T15968] kobject: 'input37' (000000000a7ec035): kobject_uevent_env [ 511.568876][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 511.572931][T15953] kobject: 'input36': free name 13:13:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 13:13:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.588418][T15968] kobject: 'input37' (000000000a7ec035): fill_kobj_path: path = '/devices/virtual/input/input37' [ 511.600456][T15966] kobject: 'input38' (0000000095135646): kobject_uevent_env [ 511.604397][T15907] kobject: 'input31' (00000000065d09e4): kobject_cleanup, parent 000000004843b88b [ 511.611873][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 511.626020][T15966] kobject: 'input38' (0000000095135646): fill_kobj_path: path = '/devices/virtual/input/input38' [ 511.637742][T15907] kobject: 'input31' (00000000065d09e4): calling ktype release [ 511.647507][T15968] kobject: 'input37' (000000000a7ec035): fill_kobj_path: path = '/devices/virtual/input/input37' [ 511.660598][T15907] kobject: 'input31': free name [ 511.667070][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 511.683338][T15966] kobject: 'input38' (0000000095135646): fill_kobj_path: path = '/devices/virtual/input/input38' [ 511.706720][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 511.716309][T15968] input: syz1 as /devices/virtual/input/input37 [ 511.718160][T15966] input: syz1 as /devices/virtual/input/input38 13:13:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 13:13:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:13:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.728386][T15968] kobject: 'event4' (000000001b84ff39): kobject_add_internal: parent: 'input37', set: 'devices' [ 511.738188][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 511.762422][T15966] kobject: 'input38' (0000000095135646): kobject_uevent_env [ 511.766132][T15982] kobject: 'input39' (000000003455d9b6): kobject_add_internal: parent: 'input', set: 'devices' [ 511.776848][ T3920] kobject: 'loop2' (000000007e5f3a44): kobject_uevent_env 13:13:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.794524][T15968] kobject: 'event4' (000000001b84ff39): kobject_uevent_env [ 511.798422][T15966] kobject: 'input38' (0000000095135646): fill_kobj_path: path = '/devices/virtual/input/input38' [ 511.804395][T15982] kobject: 'input39' (000000003455d9b6): kobject_uevent_env [ 511.822258][ T3920] kobject: 'loop2' (000000007e5f3a44): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 511.829025][T15968] kobject: 'event4' (000000001b84ff39): fill_kobj_path: path = '/devices/virtual/input/input37/event4' 13:13:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) [ 511.846345][T15982] kobject: 'input39' (000000003455d9b6): fill_kobj_path: path = '/devices/virtual/input/input39' [ 511.854512][T15966] kobject: 'input38' (0000000095135646): kobject_cleanup, parent 000000004843b88b [ 511.869955][T15982] kobject: 'input39' (000000003455d9b6): fill_kobj_path: path = '/devices/virtual/input/input39' [ 511.875064][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 511.890211][T15982] input: syz1 as /devices/virtual/input/input39 [ 511.897428][T15965] kobject: 'event4' (000000001b84ff39): kobject_uevent_env [ 511.913469][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' 13:13:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x0, 0x0, 0x1}}, 0xa) 13:13:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 511.940713][T15965] kobject: 'event4' (000000001b84ff39): fill_kobj_path: path = '/devices/virtual/input/input37/event4' [ 511.942601][T15966] kobject: 'input38' (0000000095135646): calling ktype release [ 511.964066][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 511.979176][T15982] kobject: 'input39' (000000003455d9b6): kobject_uevent_env [ 511.989805][T15965] kobject: '(null)' (00000000afd57e4e): kobject_cleanup, parent 000000001b84ff39 [ 511.999611][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.015820][T15966] kobject: 'input38': free name [ 512.016047][T15965] kobject: '(null)' (00000000afd57e4e): calling ktype release [ 512.029016][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env 13:13:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:13:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xff}}) [ 512.040428][T15982] kobject: 'input39' (000000003455d9b6): fill_kobj_path: path = '/devices/virtual/input/input39' [ 512.064785][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 512.081124][T15965] kobject: 'event4' (000000001b84ff39): kobject_cleanup, parent 000000004843b88b [ 512.089272][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 512.099623][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 512.107345][T15965] kobject: 'event4' (000000001b84ff39): calling ktype release [ 512.110668][T15982] kobject: 'input39' (000000003455d9b6): kobject_cleanup, parent 000000004843b88b [ 512.131310][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 512.138769][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 512.140910][T15965] kobject: 'event4': free name [ 512.151465][T15982] kobject: 'input39' (000000003455d9b6): calling ktype release [ 512.159093][T16003] kobject: 'input40' (000000006ab56775): kobject_add_internal: parent: 'input', set: 'devices' [ 512.164716][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 512.172529][T15965] kobject: 'input37' (000000000a7ec035): kobject_uevent_env [ 512.179673][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 512.187312][T16003] kobject: 'input40' (000000006ab56775): kobject_uevent_env [ 512.199619][T15982] kobject: 'input39': free name [ 512.205018][T16003] kobject: 'input40' (000000006ab56775): fill_kobj_path: path = '/devices/virtual/input/input40' [ 512.220956][T15965] kobject: 'input37' (000000000a7ec035): fill_kobj_path: path = '/devices/virtual/input/input37' [ 512.233027][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 512.240390][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 512.252293][T16003] kobject: 'input40' (000000006ab56775): fill_kobj_path: path = '/devices/virtual/input/input40' [ 512.264678][T15965] kobject: 'input37' (000000000a7ec035): kobject_cleanup, parent 000000004843b88b [ 512.268554][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 512.273986][T16003] input: syz1 as /devices/virtual/input/input40 [ 512.281693][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 512.289618][T15965] kobject: 'input37' (000000000a7ec035): calling ktype release [ 512.299520][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 512.308126][T16003] kobject: 'event4' (00000000450a05bf): kobject_add_internal: parent: 'input40', set: 'devices' [ 512.312907][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 512.325395][T15965] kobject: 'input37': free name [ 512.335399][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 512.345560][T16003] kobject: 'event4' (00000000450a05bf): kobject_uevent_env 13:13:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 13:13:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}) [ 512.345757][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 512.361140][T16003] kobject: 'event4' (00000000450a05bf): fill_kobj_path: path = '/devices/virtual/input/input40/event4' [ 512.368427][ T3920] kobject: 'loop0' (00000000c247feed): kobject_uevent_env [ 512.383114][ T3920] kobject: 'loop0' (00000000c247feed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.397298][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 512.411158][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 512.415013][T16011] kobject: 'kvm' (00000000413de78f): kobject_uevent_env 13:13:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 13:13:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xff}}) 13:13:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 512.477611][T16002] kobject: 'event4' (00000000450a05bf): kobject_uevent_env [ 512.490244][T16015] kobject: 'input41' (00000000ece2e5a8): kobject_add_internal: parent: 'input', set: 'devices' [ 512.521105][T16002] kobject: 'event4' (00000000450a05bf): fill_kobj_path: path = '/devices/virtual/input/input40/event4' [ 512.541472][T16011] kobject: 'kvm' (00000000413de78f): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 512.557669][T16026] kobject: 'input42' (0000000065e58bdf): kobject_add_internal: parent: 'input', set: 'devices' 13:13:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xff}}) [ 512.561915][T16015] kobject: 'input41' (00000000ece2e5a8): kobject_uevent_env [ 512.581314][T16002] kobject: '(null)' (000000000eff4ae0): kobject_cleanup, parent 00000000450a05bf [ 512.630839][T16002] kobject: '(null)' (000000000eff4ae0): calling ktype release [ 512.633356][T16009] kobject: 'kvm' (00000000413de78f): kobject_uevent_env [ 512.678230][T16015] kobject: 'input41' (00000000ece2e5a8): fill_kobj_path: path = '/devices/virtual/input/input41' [ 512.685530][T16026] kobject: 'input42' (0000000065e58bdf): kobject_uevent_env [ 512.706971][T16009] kobject: 'kvm' (00000000413de78f): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 512.711339][T16002] kobject: 'event4' (00000000450a05bf): kobject_cleanup, parent 000000004843b88b [ 512.720430][T16015] kobject: 'input41' (00000000ece2e5a8): fill_kobj_path: path = '/devices/virtual/input/input41' [ 512.755294][T16026] kobject: 'input42' (0000000065e58bdf): fill_kobj_path: path = '/devices/virtual/input/input42' 13:13:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xff}}) [ 512.787612][T16011] kobject: 'kvm' (00000000413de78f): kobject_uevent_env [ 512.795232][T16002] kobject: 'event4' (00000000450a05bf): calling ktype release [ 512.806623][T16015] input: syz1 as /devices/virtual/input/input41 [ 512.820876][T16002] kobject: 'event4': free name [ 512.822814][T16011] kobject: 'kvm' (00000000413de78f): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 512.841137][T16026] kobject: 'input42' (0000000065e58bdf): fill_kobj_path: path = '/devices/virtual/input/input42' [ 512.851483][T16015] kobject: 'input41' (00000000ece2e5a8): kobject_uevent_env [ 512.861229][T16002] kobject: 'input40' (000000006ab56775): kobject_uevent_env [ 512.895644][T16015] kobject: 'input41' (00000000ece2e5a8): fill_kobj_path: path = '/devices/virtual/input/input41' [ 512.899829][T16026] input: syz1 as /devices/virtual/input/input42 [ 512.919780][T16002] kobject: 'input40' (000000006ab56775): fill_kobj_path: path = '/devices/virtual/input/input40' [ 512.934486][T16011] kobject: 'kvm' (00000000413de78f): kobject_uevent_env 13:13:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, 0x0, &(0x7f0000000100)) [ 512.936023][T16002] kobject: 'input40' (000000006ab56775): kobject_cleanup, parent 000000004843b88b [ 512.950206][T16015] kobject: 'input41' (00000000ece2e5a8): kobject_cleanup, parent 000000004843b88b [ 512.953269][T16011] kobject: 'kvm' (00000000413de78f): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 512.965328][T16015] kobject: 'input41' (00000000ece2e5a8): calling ktype release [ 512.974838][T16026] kobject: 'event4' (00000000b67e07e2): kobject_add_internal: parent: 'input42', set: 'devices' [ 512.989244][T16002] kobject: 'input40' (000000006ab56775): calling ktype release [ 513.001176][T16026] kobject: 'event4' (00000000b67e07e2): kobject_uevent_env [ 513.008490][T16002] kobject: 'input40': free name [ 513.012775][T16015] kobject: 'input41': free name 13:13:51 executing program 4: symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="5b4ef159dd8d69085b67cd3b84f07a653a3a5d2c303a"], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 13:13:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x7c, 0x0, 0x0) [ 513.036758][T16026] kobject: 'event4' (00000000b67e07e2): fill_kobj_path: path = '/devices/virtual/input/input42/event4' 13:13:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x0, 0x1, [0x41d]}, 0xa) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x9) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5) [ 513.077414][T16020] kobject: 'event4' (00000000b67e07e2): kobject_uevent_env [ 513.086191][ T3920] kobject: 'loop4' (00000000fd00e9d8): kobject_uevent_env [ 513.101290][ T3920] kobject: 'loop4' (00000000fd00e9d8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 513.111668][T16020] kobject: 'event4' (00000000b67e07e2): fill_kobj_path: path = '/devices/virtual/input/input42/event4' 13:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x7) 13:13:51 executing program 5: syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='errors=remount-ro,disable_sparse=yes,dmask=00000000000000000000000,mfer=0x0000000000000000,nls=euc-jp,errors=continue,uid=']) [ 513.124457][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 513.135895][T16020] kobject: '(null)' (00000000e48b7379): kobject_cleanup, parent 00000000b67e07e2 [ 513.145465][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.155937][T16020] kobject: '(null)' (00000000e48b7379): calling ktype release [ 513.163306][T16058] libceph: resolve 'NYݍi[g;ze' (ret=-3): failed [ 513.170907][ T3920] kobject: 'loop1' (00000000ed0f5141): kobject_uevent_env [ 513.184839][T16062] libceph: resolve 'NYݍi[g;ze' (ret=-3): failed [ 513.187460][ T3920] kobject: 'loop1' (00000000ed0f5141): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 513.205440][T16058] libceph: parse_ips bad ip '[NYݍi[g;ze::],0' [ 513.211161][T16020] kobject: 'event4' (00000000b67e07e2): kobject_cleanup, parent 000000004843b88b [ 513.219660][T16069] sg_write: data in/out 65500/203 bytes for SCSI command 0x0-- guessing data in; 13:13:52 executing program 4: symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="5b4ef159dd8d69085b67cd3b84f07a653a3a5d2c303a"], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 513.219660][T16069] program syz-executor.1 not setting count and/or reply_len properly [ 513.224730][T16020] kobject: 'event4' (00000000b67e07e2): calling ktype release [ 513.245757][T16062] libceph: parse_ips bad ip '[NYݍi[g;ze::],0' [ 513.249595][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 513.255221][T16071] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 513.260218][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 513.280477][T16020] kobject: 'event4': free name [ 513.285626][T16020] kobject: 'input42' (0000000065e58bdf): kobject_uevent_env [ 513.287631][T16071] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.299332][ T3920] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 513.305336][T16071] ntfs: (device loop5): parse_options(): Unrecognized mount option mfer. [ 513.318945][T16071] ntfs: (device loop5): parse_options(): The uid option requires an argument. [ 513.325407][T16020] kobject: 'input42' (0000000065e58bdf): fill_kobj_path: path = '/devices/virtual/input/input42' [ 513.339503][ T3920] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.346522][T16074] libceph: resolve 'NYݍi[g;ze' (ret=-3): failed [ 513.356764][T16071] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 513.359881][T16020] kobject: 'input42' (0000000065e58bdf): kobject_cleanup, parent 000000004843b88b [ 513.364152][T16071] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.373302][T16074] libceph: parse_ips bad ip '[NYݍi[g;ze::],0' [ 513.393984][ T3920] kobject: 'loop3' (0000000085aa77bd): kobject_uevent_env [ 513.399199][T16071] kobject: 'loop5' (000000006d221389): kobject_uevent_env [ 513.409542][T16071] kobject: 'loop5' (000000006d221389): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.413663][ T3920] kobject: 'loop3' (0000000085aa77bd): fill_kobj_path: path = '/devices/virtual/block/loop3' 13:13:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 13:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0