8c15ff7211ec489c8702a14e36795503729c06cdcf4751c43da355a31decc3335e5d182a80fffbbe9936cc0594c608f30ec3ff5baf5f2a811a15a6706e62f607124ef8978c607421ba8a53c9c725c8118ec12c11ddc50fe8eab32887345fd6d9f6e40649f226cc34961d8f8281b2cbf4587fa77379ac8280fbbf522e952bde49264bbeff55b14d297baeb3783bd5a8ffe", 0xd3, 0x100000001}], 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) close(r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x2880, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0xe, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000180)=0xb7, 0x4) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x9) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x7, &(0x7f00000001c0)={0x0, 0x1, 0x12f, 0x80000000, 0x5}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xce7, @remote, 0x47d753df}, @in6={0xa, 0x4e21, 0x2, @local, 0x20}, @in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x1}], 0x64) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0xfe0f) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe1a, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000002c0)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000000)={0x7, 0x400, 0x7fffffff}) 19:35:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x7b}) 19:35:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x15, 0x5, 0x0) r2 = dup2(r1, r1) close(r2) 19:35:02 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78}, 0x78) 19:35:03 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8210000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x840, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x1f4, @loopback}, 0x1c) r7 = accept4(r5, 0x0, &(0x7f0000047ffc), 0x0) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x893) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000a80)=ANY=[], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) 19:35:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) 19:35:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8210000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x840, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x1f4, @loopback}, 0x1c) r7 = accept4(r5, 0x0, &(0x7f0000047ffc), 0x0) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x893) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000a80)=ANY=[], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) 19:35:03 executing program 3: socketpair$unix(0x1, 0x20020000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000180), 0xa1f3ffff) 19:35:03 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) [ 1327.953420] futex_wake_op: syz-executor.3 tries to shift op by -193; fix this program 19:35:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) 19:35:03 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:03 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) [ 1328.708225] futex_wake_op: syz-executor.3 tries to shift op by -193; fix this program 19:35:05 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) 19:35:05 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:05 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4}], 0x0, 0x0, 0x0}) 19:35:05 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8210000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x840, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x1f4, @loopback}, 0x1c) r7 = accept4(r5, 0x0, &(0x7f0000047ffc), 0x0) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x893) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000a80)=ANY=[], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) 19:35:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) [ 1330.067150] binder: 19293:19296 BC_INCREFS_DONE u0000000000000000 node 174 cookie mismatch 0000000000000004 != 0000000000000000 [ 1330.101466] binder: BINDER_SET_CONTEXT_MGR already set [ 1330.141236] binder: 19293:19299 ioctl 40046207 0 returned -16 19:35:05 executing program 4: accept4$ax25(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 19:35:05 executing program 5: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) 19:35:05 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/26, 0x1a}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) 19:35:05 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00\'\x11\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 19:35:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/26, 0x1a}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) 19:35:06 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1b, 0x1f, 0x6, 0x0, 0x5, 0x3, 0x3, 0xa1, 0xffffffffffffffff}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x9, 0x4, 0x2}) close(r0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340)='rootfs\x00', 0x1008, &(0x7f00000003c0)='.\x00') seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x80, 0xffffff7f7ffffffe}]}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0x0, 0x4}) lstat(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x200008, &(0x7f00000007c0)=ANY=[@ANYBLOB=',pcr=00000000000000000007,appraise_type=imasig,smackfstransmute=selinuxvboxnet0,fscontext=user_u,\x00']) 19:35:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:35:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 19:35:06 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/26, 0x1a}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) 19:35:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 19:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:06 executing program 4: accept4$ax25(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 19:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/26, 0x1a}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) 19:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 19:35:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:07 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:07 executing program 1: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x10000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 19:35:07 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 19:35:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000000)=0x7, 0x4) close(r1) 19:35:07 executing program 4: accept4$ax25(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 19:35:07 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:07 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:07 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 19:35:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:08 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:08 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:08 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:08 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:08 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:08 executing program 4: accept4$ax25(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 19:35:08 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000006c0)={'trans=virtio,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}]}}) r0 = open(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xfefc) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x24000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) ioprio_get$pid(0x1, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), 0x0, 0x800) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/104) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000180)={0x8000, 0x0, 0x5, 0x4}) 19:35:09 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000b8e000/0x3000)=nil, 0x3000, 0x3, 0x1012, r0, 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:35:09 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 19:35:09 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r5) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:35:09 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 19:35:09 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 19:35:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syz_emit_ethernet(0x300605, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0xffffff21, 0x0, @ipv4={[0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:35:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 19:35:10 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:10 executing program 4: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:10 executing program 3: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x1}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 19:35:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x371fcda8}) 19:35:10 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x47b, 0x2000000042) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 19:35:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070000008307041700320800"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 19:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f35"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:35:10 executing program 4: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:10 executing program 1: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044943, &(0x7f0000000000)) 19:35:11 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000880)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) lsetxattr$security_evm(&(0x7f0000000080)='.\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2) listen(r2, 0x9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(r3, &(0x7f00000001c0)=""/166, 0xa6) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000075bcca1ef689ee2d00"], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x200, @remote, 0x5b57}}, 0x5, 0x2}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x10001, 0x400401) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000002c0)=0x7) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r6 = dup3(r4, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00000007c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x4, 0x202, 0xf2f2, {r8, r9/1000+30000}, {}, {0x0, 0x7fffffff, 0x3ff, 0x9}, 0x1, @can={{0x3, 0x8001, 0x8000, 0xfff}, 0x5, 0x2, 0x0, 0x0, "b6c4f83a6ea9cf73"}}, 0x48}}, 0x80) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x81, 0x200) r12 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000008c0)={0x0, 0x0, @raw_data=[0x1bd, 0x0, 0x3f, 0x2, 0x4, 0xffffffffffff769a, 0x2b, 0x6, 0x4, 0x3, 0x9, 0x6, 0xffffffffffffff81, 0x7, 0xffffffffffffc5c3, 0x1]}) ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_buf(r11, 0x29, 0xfb, &(0x7f00000004c0)=""/180, &(0x7f0000000040)=0xb4) r13 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r13, 0x2000c2604110, &(0x7f0000000080)) 19:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f35"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044943, &(0x7f0000000000)) 19:35:11 executing program 1: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:11 executing program 4: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:11 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}], 0x10) close(r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) msgget(0x1, 0x20b) msgctl$IPC_SET(0x0, 0x1, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) sendfile(r2, r3, &(0x7f0000000080)=0x80000, 0x100000001) ioctl$sock_ifreq(r0, 0x4000000000089b1, &(0x7f0000000000)={'bondslav\xfe\xff\xff\xff\xff\xff\xff\xff', @ifru_data=0x0}) bind$netrom(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) 19:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f35"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044943, &(0x7f0000000000)) 19:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044943, &(0x7f0000000000)) 19:35:11 executing program 4: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f35"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:35:11 executing program 3: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9}, {0x6}]}) 19:35:12 executing program 1: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffde5) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x1000000, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x11f7) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r2, r2, &(0x7f00000000c0), 0x6) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000480)={0x5}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) r7 = socket(0x0, 0x7, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0) fchdir(r9) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) 19:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x3, 0x99, [], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/153}, &(0x7f0000000180)=0x78) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x20004004000, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc97, 0x8, @link_local}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffff1, 0x40) 19:35:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0xb, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 19:35:12 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 19:35:12 executing program 5: r0 = socket$kcm(0x10, 0x4000000002, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00672de45ae087185082cf0124b0eba06ec44103000000000000140000000000008d0051894dd65b2f", 0x2e}], 0x1}, 0x0) 19:35:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x60) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r0, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c00)="f1", 0x1}], 0x1}}], 0x1, 0x4008000) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 19:35:12 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000380)={0x48, 0x6, 0x0, {0x6, 0x2, 0x1f, 0x0, 'posix_acl_accesswlan0\'security-'}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8) r4 = dup3(0xffffffffffffffff, r1, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000712600000000000035060000ff000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d43010000000000950000000000000061540000000000006b25000000000000070500000e0000000f6500000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r3}, 0x48) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x200000) exit(0xb0ffffff00000008) bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc) r5 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r5, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000640)={r6, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x0, @rand_addr=0x100000000}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000680)=0x10) write$P9_RREADDIR(r4, &(0x7f00000006c0)={0xa6, 0x29, 0x1, {0x4, [{{0x0, 0x2, 0x7}, 0x7, 0x1, 0x7, './file0'}, {{0x18, 0x3, 0x7}, 0x8, 0xffffffffffff0001, 0x7, './file0'}, {{0x4, 0x3, 0x3}, 0x6fed, 0x101, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x101, 0x100000001, 0x7, './file0'}, {{0x40}, 0x4a0d, 0x5, 0x7, './file0'}]}}, 0xa6) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x44000040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4) 19:35:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000001000)) 19:35:12 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 19:35:12 executing program 2: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) 19:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:35:12 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 19:35:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000001000)) 19:35:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1400008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x6300, 0x0, 0x8}}}}}, 0x0) 19:35:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='%d') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 19:35:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000001000)) 19:35:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) tkill(r1, 0x31) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x8) 19:35:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19:35:13 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 19:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:35:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000001000)) 19:35:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xb, 0x0, &(0x7f0000000000)) 19:35:13 executing program 2: clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0xa, 0x3, 0x0) 19:35:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, r1, &(0x7f00000000c0)=0x4b, 0x5a) 19:35:13 executing program 1: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 19:35:13 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:35:13 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}], 0x10) 19:35:13 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) 19:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1338.601780] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1338.626550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:35:13 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) dup2(r0, r2) 19:35:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d911631912080003003b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 19:35:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1338.891831] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1338.967461] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 19:35:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d911631912080003003b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 1339.015317] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:35:14 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) dup2(r0, r2) [ 1339.139996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1339.261366] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 19:35:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d911631912080003003b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 19:35:14 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) dup2(r0, r2) 19:35:14 executing program 1: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 19:35:14 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:35:14 executing program 5: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 1339.700323] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1339.838781] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1339.854527] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1339.896125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:35:15 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) 19:35:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d911631912080003003b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 19:35:15 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) dup2(r0, r2) [ 1339.951934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1340.079190] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1340.108330] FS-Cache: Duplicate cookie detected [ 1340.113702] FS-Cache: O-cookie c=00000000b4eb53bc [p=00000000eb4e2f5d fl=222 nc=0 na=1] [ 1340.122312] FS-Cache: O-cookie d=00000000d81940aa n=00000000e64b1df8 [ 1340.128877] FS-Cache: O-key=[10] '02000200000002000000' [ 1340.134841] FS-Cache: N-cookie c=00000000046fff7d [p=00000000eb4e2f5d fl=2 nc=0 na=1] [ 1340.143176] FS-Cache: N-cookie d=00000000d81940aa n=0000000082e2d14e [ 1340.149960] FS-Cache: N-key=[10] '02000200000002000000' 19:35:15 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) 19:35:15 executing program 3: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000140)=0x0) socket$caif_stream(0x25, 0x1, 0x0) io_getevents(r2, 0x9, 0x252, 0x0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) 19:35:15 executing program 5: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 19:35:15 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) [ 1340.664246] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 19:35:16 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) [ 1340.716846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:35:16 executing program 1: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 19:35:16 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:35:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 1341.313288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:35:16 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) [ 1341.509500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:35:17 executing program 1: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001140)={{0x77}, {0xfffffffffffffc01, 0x80}, 0x0, 0x2, 0x7ff}) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80201, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001280), &(0x7f00000013c0)=0x4) r3 = dup3(r2, r1, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd940aa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) semget$private(0x0, 0x20, 0x402) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0xde, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 19:35:17 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:17 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) 19:35:17 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) [ 1342.035660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:35:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000b9) io_setup(0x3ff, &(0x7f0000000100)=0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x0, 0x0) 19:35:17 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:35:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:18 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:18 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:18 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff00000000}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 19:35:18 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) [ 1343.439206] rdma_op 00000000f725c5bb conn xmit_rdma (null) 19:35:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000040)={0x1, 0x3, 0x0, {0x0, 0x2710}, {r2}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 19:35:18 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff00000000}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 19:35:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 19:35:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000040)={0x1, 0x3, 0x0, {0x0, 0x2710}, {r2}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 19:35:19 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) [ 1343.907031] rdma_op 0000000013388581 conn xmit_rdma (null) 19:35:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000040)={0x1, 0x3, 0x0, {0x0, 0x2710}, {r2}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 19:35:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 19:35:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10000000008003, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 19:35:19 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff00000000}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 19:35:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000040)={0x1, 0x3, 0x0, {0x0, 0x2710}, {r2}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 19:35:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 19:35:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='0\x00') 19:35:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 19:35:19 executing program 3: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) [ 1344.647675] rdma_op 00000000f85dfd65 conn xmit_rdma (null) 19:35:19 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffff) init_module(&(0x7f0000000180)='}\x00', 0x2, &(0x7f00000001c0)='$(eth1\x00') shmctl$SHM_UNLOCK(0x0, 0xc) getpid() r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) write(r2, &(0x7f0000001100)="b1eaf6a39835864416c12daa693ee00ecf29c34f58ed1a53ce3a4574dac04d713aed5811c11610d39c7649f5e08a2091034359ece9884702c7d77f87b2e49be28fdafdddc9a4b98bd8a378e1246fad5a9b57f440dc2838d5468199740cd82c9d8b19ac7066c1f651675057b03e5782dfde6d52d2e52af0c09179ff4083a93224bce9ca5b6c4a69cd6f5b929b30b3270af3", 0x91) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x800, @reserved}, 0x10) dup2(r0, r1) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffe) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x502, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000000c0)=""/4096) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/113, 0x71) 19:35:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, 0x0) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) 19:35:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x40, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x40}}, 0x0) [ 1344.919063] validate_nla: 3 callbacks suppressed [ 1344.919072] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:35:20 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x8, 0x3, 0x0, [{}, {}, {[@empty=0x1100]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) [ 1344.984381] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:35:20 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff00000000}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 19:35:20 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") write(r0, &(0x7f0000000080)="2400000020002551075c0165ff0ffc020200000000100f0007e1000c080017001600f000", 0x24) 19:35:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:35:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:35:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, 0x0) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) 19:35:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 1345.330749] rdma_op 00000000dda3e34f conn xmit_rdma (null) 19:35:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0/bus\x00', 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") umount2(&(0x7f0000000180)='./file0\x00', 0x0) 19:35:20 executing program 0: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f0000000000)="1b0000001a0099f0003be90000ed190e020808160000000000ba00", 0x1b) 19:35:21 executing program 2: r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) setgid(0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) 19:35:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x2, 0x0, 0x0, 0xffffffa5}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 19:35:21 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) ptrace$setregset(0x4205, r0, 0x207, &(0x7f0000000280)={&(0x7f0000000240)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[]]], 0x8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x0, @time={r3, r4+30000000}, 0x0, {0x0, 0x91}, 0x4d65, 0x0, 0x9}) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) 19:35:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:21 executing program 1: socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000001140)='./file0\x00', 0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="be", 0x1}]) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 19:35:21 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c"], 0x1}}, 0x0) r2 = accept(r0, 0x0, 0x0) close(r2) 19:35:21 executing program 2: r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) setgid(0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) 19:35:21 executing program 2: r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) setgid(0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) 19:35:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, 0x0) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) 19:35:21 executing program 2: r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) setgid(0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) 19:35:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:21 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:21 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) timerfd_gettime(r0, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4000400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x10, 0x232) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 19:35:22 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:22 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:22 executing program 2: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000100)='..', &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) open(&(0x7f0000000000)='./file0\x00', 0x14100, 0x0) 19:35:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) ptrace$setregset(0x4205, r0, 0x207, &(0x7f0000000280)={&(0x7f0000000240)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[]]], 0x8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x0, @time={r3, r4+30000000}, 0x0, {0x0, 0x91}, 0x4d65, 0x0, 0x9}) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) 19:35:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, 0x0) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) 19:35:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1211}) 19:35:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:22 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:23 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) 19:35:23 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:23 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 1348.229937] IPVS: ftp: loaded support on port[0] = 21 19:35:23 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) ptrace$setregset(0x4205, r0, 0x207, &(0x7f0000000280)={&(0x7f0000000240)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[]]], 0x8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x0, @time={r3, r4+30000000}, 0x0, {0x0, 0x91}, 0x4d65, 0x0, 0x9}) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) [ 1349.017159] IPVS: ftp: loaded support on port[0] = 21 19:35:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) 19:35:24 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:35:24 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) [ 1349.668940] IPVS: ftp: loaded support on port[0] = 21 19:35:25 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 1349.713120] binder: 20172:20174 got transaction with invalid offsets ptr 19:35:25 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) ioprio_get$pid(0x8000000000001, 0x0) semget(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440)=0xa6, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f00000003c0), 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 1349.828756] binder: 20172:20174 transaction failed 29201/-14, size 0-12288 line 3062 [ 1349.929395] binder_alloc: binder_alloc_mmap_handler: 20172 20001000-20004000 already mapped failed -16 [ 1349.973000] binder: BINDER_SET_CONTEXT_MGR already set [ 1349.978486] binder: 20172:20174 ioctl 40046207 0 returned -16 [ 1350.057112] binder_alloc: 20172: binder_alloc_buf, no vma [ 1350.117046] binder: undelivered TRANSACTION_ERROR: 29201 [ 1350.168518] binder: 20172:20185 transaction failed 29189/-3, size 0-12288 line 3035 [ 1350.255990] binder: undelivered TRANSACTION_ERROR: 29189 19:35:25 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="2945fdf4a3cd7cf58cc313a895d04d4690af7175c2d12c1de8d38e4e9908ed06fcd3bbe59fd8c1362d68b1661459ad6d69f208624cbb3c654d2a8a995a57c6265f488f78b849b15022ceb4f387ac8e72bcefc2371e99491e95fcf11ca8df71d3d2e116af7ad9466b871b3dda230936c1de55fff68c53606125e1fbbfeddaa164af68a4827742c4fdfae7ca383f413cac2a3437286ccd8700dd89c1e6ab0fdbb26add9605b4b1411259357fb9651b198e580bdaacd39855a7cc4cb757574594170a86aa24fa69c4120c108e8d50e72820e5649723c749bc13fc8bb78351bdb25dfdb35c1ef3164946db7c4efce55c97b5df0cd13106a3f226e91f43", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:35:25 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:25 executing program 2: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) [ 1350.700832] binder: 20194:20196 got transaction with invalid offsets ptr [ 1350.757221] binder: 20194:20196 transaction failed 29201/-14, size 0-12288 line 3062 19:35:26 executing program 5: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000100)="564690f130e10d0300b9f57c", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f00000002c0), 0x0, &(0x7f0000000000), 0x8) [ 1350.919034] IPVS: ftp: loaded support on port[0] = 21 [ 1350.935622] binder: undelivered TRANSACTION_ERROR: 29201 [ 1351.040172] binder: BINDER_SET_CONTEXT_MGR already set 19:35:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="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", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1351.193569] binder: 20197:20200 ioctl 40046207 0 returned -16 [ 1351.193889] binder_alloc: 20194: binder_alloc_buf, no vma [ 1351.284827] binder: 20197:20213 transaction failed 29189/-3, size 0-12288 line 3035 [ 1351.414729] binder: undelivered TRANSACTION_ERROR: 29189 19:35:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) ptrace$setregset(0x4205, r0, 0x207, &(0x7f0000000280)={&(0x7f0000000240)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[]]], 0x8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x0, @time={r3, r4+30000000}, 0x0, {0x0, 0x91}, 0x4d65, 0x0, 0x9}) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) 19:35:26 executing program 2: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:26 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="010027bd7000fedbdf250b000000080006f8460000005000010008000b00736970000c00070020000000020000000800040000000000000009004b0000000c00068168e03261e396d30d39ded4006c626c6300000000080006006c6300000c0007000400000004000000080004004e22000008000400faffffff48000100080004004e210000080008000700000014000300000000000000000108000b007356fdc4aca459330b000000080008000400000008000b0000080005040000000800090000000000080007000900000008000400feffffff08000500050000001400010000000000000000000000ffffac1414aa080003000300000008000400802d0000000000000000000000dc7d6e2ce120a4de2aafb80f59d9ed6ad657352763270b832be62d"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="2945fdf4a3cd7cf58cc313a895d04d4690af7175c2d12c1de8d38e4e9908ed06fcd3bbe59fd8c1362d68b1661459ad6d69f208624cbb3c654d2a8a995a57c6265f488f78b849b15022ceb4f387ac8e72bcefc2371e99491e95fcf11ca8df71d3d2e116af7ad9466b871b3dda230936c1de55fff68c53606125e1fbbfeddaa164af68a4827742c4fdfae7ca383f413cac2a3437286ccd8700dd89c1e6ab0fdbb26add9605b4b1411259357fb9651b198e580bdaacd39855a7cc4cb757574594170a86aa24fa69c4120c108e8d50e72820e5649723c749bc13fc8bb78351bdb25dfdb35c1ef3164946db7c4efce55c97b5df0cd13106a3f226e91f43", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:35:26 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="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", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:35:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) [ 1351.862903] binder: 20223:20227 got transaction with invalid offsets ptr [ 1351.875574] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.900678] binder: 20225:20230 ioctl 40046207 0 returned -16 [ 1351.911058] binder: 20223:20227 transaction failed 29201/-14, size 0-12288 line 3062 [ 1351.926829] binder: 20225:20239 got transaction with invalid offsets ptr 19:35:27 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="2945fdf4a3cd7cf58cc313a895d04d4690af7175c2d12c1de8d38e4e9908ed06fcd3bbe59fd8c1362d68b1661459ad6d69f208624cbb3c654d2a8a995a57c6265f488f78b849b15022ceb4f387ac8e72bcefc2371e99491e95fcf11ca8df71d3d2e116af7ad9466b871b3dda230936c1de55fff68c53606125e1fbbfeddaa164af68a4827742c4fdfae7ca383f413cac2a3437286ccd8700dd89c1e6ab0fdbb26add9605b4b1411259357fb9651b198e580bdaacd39855a7cc4cb757574594170a86aa24fa69c4120c108e8d50e72820e5649723c749bc13fc8bb78351bdb25dfdb35c1ef3164946db7c4efce55c97b5df0cd13106a3f226e91f43", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1351.964620] binder: 20225:20239 transaction failed 29201/-14, size 0-12288 line 3062 [ 1352.118828] binder: undelivered TRANSACTION_ERROR: 29201 [ 1352.130102] binder: undelivered TRANSACTION_ERROR: 29201 [ 1352.150520] IPVS: ftp: loaded support on port[0] = 21 19:35:27 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:27 executing program 2: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) setuid(r1) setreuid(r1, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)) 19:35:27 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="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", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1352.613242] binder: 20251:20252 got transaction with invalid offsets ptr [ 1352.647959] binder: BINDER_SET_CONTEXT_MGR already set [ 1352.655918] binder: 20251:20252 transaction failed 29201/-14, size 0-12288 line 3062 [ 1352.676222] binder: 20254:20260 ioctl 40046207 0 returned -16 [ 1352.699480] binder: 20254:20255 got transaction with invalid offsets ptr [ 1352.745121] binder: undelivered TRANSACTION_ERROR: 29201 [ 1352.785596] binder: 20254:20255 transaction failed 29201/-14, size 0-12288 line 3062 [ 1352.839600] binder: undelivered TRANSACTION_ERROR: 29201 19:35:28 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e0, &(0x7f0000001800)={@netrom, @remote, 0x0, [@null, @netrom, @null, @netrom, @default, @bcast, @default, @rose]}) 19:35:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) 19:35:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x0, 0xea7}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1d8) [ 1353.054276] IPVS: ftp: loaded support on port[0] = 21 19:35:28 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e0, &(0x7f0000001800)={@netrom, @remote, 0x0, [@null, @netrom, @null, @netrom, @default, @bcast, @default, @rose]}) 19:35:28 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) get_robust_list(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) socket$inet6_tcp(0xa, 0x1, 0x0) 19:35:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x0, 0xea7}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1d8) 19:35:28 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e0, &(0x7f0000001800)={@netrom, @remote, 0x0, [@null, @netrom, @null, @netrom, @default, @bcast, @default, @rose]}) [ 1354.103795] IPVS: ftp: loaded support on port[0] = 21 [ 1354.354852] audit: type=1804 audit(1550691329.604:557): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir355699789/syzkaller.LTxjrT/438/memory.events" dev="sda1" ino=16634 res=1 [ 1354.414617] audit: type=1800 audit(1550691329.664:558): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16634 res=0 19:35:31 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x89e0, &(0x7f0000001800)={@netrom, @remote, 0x0, [@null, @netrom, @null, @netrom, @default, @bcast, @default, @rose]}) 19:35:31 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)) ioctl(r0, 0x8912, &(0x7f0000000ac0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') close(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') r1 = accept4(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x400000000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdc1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x7fff) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200000a14000d00fe8000000000000000000000000000bb08000c00080000007dcfa60a966740153b49c05ac4031c9f6f35823e0acf04f4e6390b1a2a98beea95ddd3d76ac7b2a71ced02b44517dd31f6b042c379071716754e982a2bd6eac3e6fd928af6878fe8a6cfb0fa06afb24cdc300ef7137aeed9dab99a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440)="2945fdf4a3cd7cf58cc313a895d04d4690af7175c2d12c1de8d38e4e9908ed06fcd3bbe59fd8c1362d68b1661459ad6d69f208624cbb3c654d2a8a995a57c6265f488f78b849b15022ceb4f387ac8e72bcefc2371e99491e95fcf11ca8df71d3d2e116af7ad9466b871b3dda230936c1de55fff68c53606125e1fbbfeddaa164af68a4827742c4fdfae7ca383f413cac2a3437286ccd8700dd89c1e6ab0fdbb26add9605b4b1411259357fb9651b198e580bdaacd39855a7cc4cb757574594170a86aa24fa69c4120c108e8d50e72820e5649723c749bc13fc8bb78351bdb25dfdb35c1ef3164946db7c4efce55c97b5df0cd13106a3f226e91f43", 0xfb, 0x20000000, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) ioprio_set$pid(0x2, r5, 0x8) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x70f, @mcast1, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000400)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000940)={0x0, 0xc000000}, &(0x7f0000000980)=0x8) getsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000002c0), &(0x7f0000000640)=0x2f8) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 19:35:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x0, 0xea7}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1d8) 19:35:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x21, 0x0, @dev, @local, {[], @dccp={{0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 19:35:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1355.861680] dccp_invalid_packet: P.CsCov 6 exceeds packet length 16 19:35:31 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001880)={0x8, "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", 0x1000}, 0x1006) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng, 0x2, 0x0) dup2(r1, r0) finit_module(r0, 0x0, 0x0) [ 1355.929535] dccp_invalid_packet: P.CsCov 6 exceeds packet length 16 19:35:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000280)=""/9) 19:35:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8, {{0x0, 0xea7}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1d8) [ 1356.010178] audit: type=1804 audit(1550691331.254:559): pid=20322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/367/bus" dev="sda1" ino=16676 res=1 19:35:31 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, 0x0, 0x0, 0x0) 19:35:31 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'ip6erspan0\x00', 0x3}, 0x18) userfaultfd(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000240)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1356.042244] audit: type=1804 audit(1550691331.264:560): pid=20322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/367/bus" dev="sda1" ino=16676 res=1 [ 1356.075384] audit: type=1804 audit(1550691331.264:561): pid=20324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/367/bus" dev="sda1" ino=16676 res=1 [ 1356.141155] IPVS: ftp: loaded support on port[0] = 21 19:35:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080480900000046000107000000141900040051000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 19:35:31 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:35:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) [ 1356.624629] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:35:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000e0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 19:35:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0xc0003}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000380)) 19:35:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge_slave_1\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) [ 1356.763409] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1356.826455] CPU: 0 PID: 20351 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1356.833791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.843160] Call Trace: [ 1356.843347] dump_stack+0x172/0x1f0 [ 1356.843373] dump_header+0x10f/0xb6c [ 1356.843392] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1356.843409] ? ___ratelimit+0x60/0x595 [ 1356.843425] ? do_raw_spin_unlock+0x57/0x270 [ 1356.843448] oom_kill_process.cold+0x10/0x6f5 [ 1356.843469] ? task_will_free_mem+0x139/0x6e0 [ 1356.875776] out_of_memory+0x79a/0x1280 [ 1356.875801] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1356.875824] ? oom_killer_disable+0x280/0x280 [ 1356.875858] mem_cgroup_out_of_memory+0x99/0xe0 [ 1356.875876] ? memcg_memory_event+0x40/0x40 [ 1356.875906] ? cgroup_file_notify+0x140/0x1b0 [ 1356.902864] memory_max_write+0x169/0x300 [ 1356.907027] ? kernfs_fop_write+0x204/0x480 [ 1356.911460] ? mem_cgroup_write+0x360/0x360 [ 1356.915804] ? lock_acquire+0x16f/0x3f0 [ 1356.919799] ? kernfs_fop_write+0x227/0x480 [ 1356.924155] cgroup_file_write+0x245/0x7a0 [ 1356.928420] ? mem_cgroup_write+0x360/0x360 [ 1356.932768] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1356.937730] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1356.942681] kernfs_fop_write+0x2ba/0x480 [ 1356.946851] ? lock_downgrade+0x810/0x810 [ 1356.951033] __vfs_write+0x116/0x8e0 [ 1356.954770] ? kernfs_fop_open+0xd90/0xd90 [ 1356.959050] ? kernel_read+0x120/0x120 [ 1356.962978] ? kfree+0x173/0x230 [ 1356.966361] ? kvfree+0x61/0x70 [ 1356.969654] ? kfree+0x173/0x230 [ 1356.973038] ? __lock_is_held+0xb6/0x140 [ 1356.977146] __kernel_write+0x110/0x3b0 [ 1356.981144] write_pipe_buf+0x15d/0x1f0 [ 1356.981166] ? do_splice_direct+0x2a0/0x2a0 [ 1356.981183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1356.981201] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 1356.981228] __splice_from_pipe+0x39a/0x7e0 [ 1356.981249] ? do_splice_direct+0x2a0/0x2a0 [ 1356.989558] ? do_splice_direct+0x2a0/0x2a0 [ 1357.013429] splice_from_pipe+0x108/0x170 [ 1357.017592] ? splice_shrink_spd+0xd0/0xd0 [ 1357.017625] ? security_file_permission+0x94/0x320 [ 1357.017649] default_file_splice_write+0x3c/0x90 [ 1357.017663] ? generic_splice_sendpage+0x50/0x50 [ 1357.017684] direct_splice_actor+0x126/0x1a0 [ 1357.017708] splice_direct_to_actor+0x369/0x970 [ 1357.017730] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1357.017754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.017772] ? do_splice_to+0x190/0x190 [ 1357.017794] ? rw_verify_area+0x118/0x360 [ 1357.017817] do_splice_direct+0x1da/0x2a0 [ 1357.017839] ? splice_direct_to_actor+0x970/0x970 [ 1357.017862] ? rcu_read_lock_sched_held+0x110/0x130 [ 1357.078046] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1357.082837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.088395] ? __sb_start_write+0x1ac/0x360 [ 1357.092739] do_sendfile+0x597/0xd00 [ 1357.096486] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1357.101105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1357.106658] ? put_timespec64+0xda/0x140 [ 1357.110753] __x64_sys_sendfile64+0x1dd/0x220 [ 1357.115264] ? __ia32_sys_sendfile+0x230/0x230 [ 1357.119855] ? do_syscall_64+0x26/0x610 [ 1357.119874] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1357.119894] ? trace_hardirqs_on+0x67/0x230 [ 1357.119917] do_syscall_64+0x103/0x610 [ 1357.119941] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1357.119955] RIP: 0033:0x457e29 [ 1357.119972] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1357.119981] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1357.119997] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1357.120006] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1357.120018] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1357.174557] IPVS: ftp: loaded support on port[0] = 21 [ 1357.179002] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1357.179013] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 1357.275260] memory: usage 117968kB, limit 30720kB, failcnt 0 [ 1357.283431] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1357.290340] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1357.298449] Memory cgroup stats for /syz4: cache:132KB rss:101308KB rss_huge:94208KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:101308KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1357.398874] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10540,uid=0 [ 1357.496882] Memory cgroup out of memory: Kill process 10540 (syz-executor.4) score 2620 or sacrifice child [ 1357.519276] Killed process 10540 (syz-executor.4) total-vm:72976kB, anon-rss:16556kB, file-rss:35800kB, shmem-rss:0kB [ 1357.542309] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1357.551213] oom_reaper: reaped process 10540 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1357.553498] CPU: 0 PID: 20350 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1357.569881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.579264] Call Trace: [ 1357.581879] dump_stack+0x172/0x1f0 [ 1357.586053] dump_header+0x10f/0xb6c [ 1357.589803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1357.594926] ? ___ratelimit+0x60/0x595 [ 1357.598828] ? do_raw_spin_unlock+0x57/0x270 [ 1357.603243] oom_kill_process.cold+0x10/0x6f5 [ 1357.607748] ? task_will_free_mem+0x139/0x6e0 [ 1357.612255] out_of_memory+0x79a/0x1280 [ 1357.616252] ? oom_killer_disable+0x280/0x280 [ 1357.620780] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1357.625902] mem_cgroup_out_of_memory+0x99/0xe0 [ 1357.630626] ? memcg_memory_event+0x40/0x40 [ 1357.634955] ? _raw_spin_unlock+0x2d/0x50 [ 1357.639111] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1357.644219] try_charge+0xfec/0x1570 [ 1357.647929] ? find_held_lock+0x35/0x130 [ 1357.652013] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1357.656876] ? kasan_check_read+0x11/0x20 [ 1357.661090] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1357.666003] mem_cgroup_try_charge+0x24d/0x5e0 [ 1357.670613] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1357.675561] __handle_mm_fault+0x1e26/0x3f20 [ 1357.679993] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1357.684864] ? find_held_lock+0x35/0x130 [ 1357.688932] ? handle_mm_fault+0x322/0xb30 [ 1357.693194] ? kasan_check_read+0x11/0x20 [ 1357.697351] handle_mm_fault+0x43f/0xb30 [ 1357.701426] __do_page_fault+0x5da/0xd60 [ 1357.705506] do_page_fault+0x71/0x581 [ 1357.709310] ? page_fault+0x8/0x30 [ 1357.712846] page_fault+0x1e/0x30 [ 1357.716668] RIP: 0033:0x40f98f [ 1357.719871] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1357.738772] RSP: 002b:00007ffddd711580 EFLAGS: 00010206 [ 1357.744139] RAX: 00007f4d33f40000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 1357.751430] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1357.758740] RBP: 00007ffddd711660 R08: ffffffffffffffff R09: 0000000000000000 [ 1357.766009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddd711740 [ 1357.773306] R13: 00007f4d33f60700 R14: 0000000000000004 R15: 000000000073bfac [ 1357.783493] memory: usage 101208kB, limit 30720kB, failcnt 8 [ 1357.789446] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1357.798573] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1357.804835] Memory cgroup stats for /syz4: cache:132KB rss:84748KB rss_huge:77824KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:84776KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1357.825699] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15780,uid=0 [ 1357.840414] Memory cgroup out of memory: Kill process 15780 (syz-executor.4) score 2187 or sacrifice child [ 1357.850395] Killed process 15780 (syz-executor.4) total-vm:72712kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB [ 1357.863924] oom_reaper: reaped process 15780 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1357.888252] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1357.932044] CPU: 0 PID: 20351 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1357.939395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.948759] Call Trace: [ 1357.951361] dump_stack+0x172/0x1f0 [ 1357.955010] dump_header+0x10f/0xb6c [ 1357.958742] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1357.963865] ? ___ratelimit+0x60/0x595 [ 1357.967767] ? do_raw_spin_unlock+0x57/0x270 [ 1357.972197] oom_kill_process.cold+0x10/0x6f5 [ 1357.976720] ? task_will_free_mem+0x139/0x6e0 [ 1357.981243] out_of_memory+0x79a/0x1280 [ 1357.985243] ? find_held_lock+0x35/0x130 [ 1357.989327] ? oom_killer_disable+0x280/0x280 [ 1357.993862] mem_cgroup_out_of_memory+0x99/0xe0 [ 1357.998545] ? memcg_memory_event+0x40/0x40 [ 1358.002885] ? trace_hardirqs_on+0x67/0x230 [ 1358.007231] ? cgroup_file_notify+0x140/0x1b0 [ 1358.011753] memory_max_write+0x169/0x300 [ 1358.015915] ? kernfs_fop_write+0x204/0x480 [ 1358.020257] ? mem_cgroup_write+0x360/0x360 [ 1358.024593] ? lock_acquire+0x16f/0x3f0 [ 1358.028579] ? kernfs_fop_write+0x227/0x480 [ 1358.032927] cgroup_file_write+0x245/0x7a0 [ 1358.037181] ? mem_cgroup_write+0x360/0x360 [ 1358.041512] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1358.046467] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1358.051406] kernfs_fop_write+0x2ba/0x480 [ 1358.055563] ? lock_downgrade+0x810/0x810 [ 1358.059731] __vfs_write+0x116/0x8e0 [ 1358.063462] ? kernfs_fop_open+0xd90/0xd90 [ 1358.067711] ? kernel_read+0x120/0x120 [ 1358.071611] ? kfree+0x173/0x230 [ 1358.074995] ? kvfree+0x61/0x70 [ 1358.078286] ? kfree+0x173/0x230 [ 1358.081673] ? __lock_is_held+0xb6/0x140 [ 1358.085773] __kernel_write+0x110/0x3b0 [ 1358.089774] write_pipe_buf+0x15d/0x1f0 [ 1358.093768] ? do_splice_direct+0x2a0/0x2a0 [ 1358.098122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.103681] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 1358.109065] __splice_from_pipe+0x39a/0x7e0 [ 1358.113420] ? do_splice_direct+0x2a0/0x2a0 [ 1358.117764] ? do_splice_direct+0x2a0/0x2a0 [ 1358.122115] splice_from_pipe+0x108/0x170 [ 1358.126284] ? splice_shrink_spd+0xd0/0xd0 [ 1358.130547] ? security_file_permission+0x94/0x320 [ 1358.135505] default_file_splice_write+0x3c/0x90 [ 1358.140269] ? generic_splice_sendpage+0x50/0x50 [ 1358.145045] direct_splice_actor+0x126/0x1a0 [ 1358.149494] splice_direct_to_actor+0x369/0x970 [ 1358.154186] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1358.159051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.164613] ? do_splice_to+0x190/0x190 [ 1358.168604] ? rw_verify_area+0x118/0x360 [ 1358.172775] do_splice_direct+0x1da/0x2a0 [ 1358.176938] ? splice_direct_to_actor+0x970/0x970 [ 1358.181802] ? rcu_read_lock_sched_held+0x110/0x130 [ 1358.186831] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1358.191605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.197165] ? __sb_start_write+0x1ac/0x360 [ 1358.201511] do_sendfile+0x597/0xd00 [ 1358.205253] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1358.209848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1358.215401] ? put_timespec64+0xda/0x140 [ 1358.219494] __x64_sys_sendfile64+0x1dd/0x220 [ 1358.224006] ? __ia32_sys_sendfile+0x230/0x230 [ 1358.228605] ? do_syscall_64+0x26/0x610 [ 1358.232598] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1358.237197] ? trace_hardirqs_on+0x67/0x230 [ 1358.241542] do_syscall_64+0x103/0x610 [ 1358.245452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1358.250653] RIP: 0033:0x457e29 [ 1358.253857] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1358.272774] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1358.280491] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1358.287769] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1358.295052] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1358.302347] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1358.309635] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 1358.320624] memory: usage 96828kB, limit 30720kB, failcnt 14 [ 1358.340325] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1358.347333] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1358.353615] Memory cgroup stats for /syz4: cache:132KB rss:80568KB rss_huge:73728KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80560KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1358.375995] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15820,uid=0 [ 1358.394493] Memory cgroup out of memory: Kill process 15820 (syz-executor.4) score 2187 or sacrifice child [ 1358.406047] Killed process 15820 (syz-executor.4) total-vm:72712kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB [ 1358.461776] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1358.487102] CPU: 0 PID: 20350 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1358.494405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.503756] Call Trace: [ 1358.506341] dump_stack+0x172/0x1f0 [ 1358.509967] dump_header+0x10f/0xb6c [ 1358.513674] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1358.518781] ? ___ratelimit+0x60/0x595 [ 1358.522669] ? do_raw_spin_unlock+0x57/0x270 [ 1358.527118] oom_kill_process.cold+0x10/0x6f5 [ 1358.531636] ? task_will_free_mem+0x139/0x6e0 [ 1358.536163] out_of_memory+0x79a/0x1280 [ 1358.540148] ? oom_killer_disable+0x280/0x280 [ 1358.544638] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1358.549745] mem_cgroup_out_of_memory+0x99/0xe0 [ 1358.554419] ? memcg_memory_event+0x40/0x40 [ 1358.558766] ? _raw_spin_unlock+0x2d/0x50 [ 1358.562920] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1358.568037] try_charge+0xfec/0x1570 [ 1358.571744] ? find_held_lock+0x35/0x130 [ 1358.575803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1358.580663] ? kasan_check_read+0x11/0x20 [ 1358.584827] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1358.589669] mem_cgroup_try_charge+0x24d/0x5e0 [ 1358.594256] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1358.599183] __handle_mm_fault+0x1e26/0x3f20 [ 1358.603606] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1358.608461] ? find_held_lock+0x35/0x130 [ 1358.612517] ? handle_mm_fault+0x322/0xb30 [ 1358.616933] ? kasan_check_read+0x11/0x20 [ 1358.621123] handle_mm_fault+0x43f/0xb30 [ 1358.625223] __do_page_fault+0x5da/0xd60 [ 1358.629291] do_page_fault+0x71/0x581 [ 1358.633111] ? page_fault+0x8/0x30 [ 1358.636660] page_fault+0x1e/0x30 [ 1358.640133] RIP: 0033:0x40f98f [ 1358.643315] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1358.662215] RSP: 002b:00007ffddd711580 EFLAGS: 00010206 [ 1358.667572] RAX: 00007f4d33f40000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 1358.674840] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1358.682124] RBP: 00007ffddd711660 R08: ffffffffffffffff R09: 0000000000000000 [ 1358.689394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddd711740 [ 1358.696660] R13: 00007f4d33f60700 R14: 0000000000000004 R15: 000000000073bfac [ 1358.711604] memory: usage 92448kB, limit 30720kB, failcnt 14 [ 1358.718172] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1358.739277] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1358.746964] Memory cgroup stats for /syz4: cache:132KB rss:76412KB rss_huge:69632KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:76344KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1358.768915] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15852,uid=0 [ 1358.785842] Memory cgroup out of memory: Kill process 15852 (syz-executor.4) score 2187 or sacrifice child [ 1358.800289] Killed process 15852 (syz-executor.4) total-vm:72712kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB [ 1358.833957] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1358.859980] CPU: 1 PID: 20351 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1358.867322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.876698] Call Trace: [ 1358.879319] dump_stack+0x172/0x1f0 [ 1358.882981] dump_header+0x10f/0xb6c [ 1358.886721] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1358.891859] ? ___ratelimit+0x60/0x595 [ 1358.895780] ? do_raw_spin_unlock+0x57/0x270 [ 1358.900231] oom_kill_process.cold+0x10/0x6f5 [ 1358.904771] ? task_will_free_mem+0x139/0x6e0 [ 1358.909307] out_of_memory+0x79a/0x1280 [ 1358.913322] ? oom_killer_disable+0x280/0x280 [ 1358.917865] mem_cgroup_out_of_memory+0x99/0xe0 [ 1358.922558] ? memcg_memory_event+0x40/0x40 [ 1358.926902] ? trace_hardirqs_on+0x67/0x230 [ 1358.931251] ? cgroup_file_notify+0x140/0x1b0 [ 1358.935773] memory_max_write+0x169/0x300 [ 1358.939931] ? kernfs_fop_write+0x204/0x480 [ 1358.944303] ? mem_cgroup_write+0x360/0x360 [ 1358.948640] ? lock_acquire+0x16f/0x3f0 [ 1358.952628] ? kernfs_fop_write+0x227/0x480 [ 1358.956965] cgroup_file_write+0x245/0x7a0 [ 1358.961241] ? mem_cgroup_write+0x360/0x360 [ 1358.965579] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1358.970533] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1358.975473] kernfs_fop_write+0x2ba/0x480 [ 1358.979636] ? lock_downgrade+0x810/0x810 [ 1358.983805] __vfs_write+0x116/0x8e0 [ 1358.987533] ? kernfs_fop_open+0xd90/0xd90 [ 1358.991780] ? kernel_read+0x120/0x120 [ 1358.995677] ? kfree+0x173/0x230 [ 1358.999048] ? kvfree+0x61/0x70 [ 1359.002340] ? kfree+0x173/0x230 [ 1359.005723] ? __lock_is_held+0xb6/0x140 [ 1359.009814] __kernel_write+0x110/0x3b0 [ 1359.013806] write_pipe_buf+0x15d/0x1f0 [ 1359.017790] ? do_splice_direct+0x2a0/0x2a0 [ 1359.022131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.027683] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 1359.033065] __splice_from_pipe+0x39a/0x7e0 [ 1359.037407] ? do_splice_direct+0x2a0/0x2a0 [ 1359.041747] ? do_splice_direct+0x2a0/0x2a0 [ 1359.046089] splice_from_pipe+0x108/0x170 [ 1359.050251] ? splice_shrink_spd+0xd0/0xd0 [ 1359.054509] ? security_file_permission+0x94/0x320 [ 1359.059457] default_file_splice_write+0x3c/0x90 [ 1359.064218] ? generic_splice_sendpage+0x50/0x50 [ 1359.068987] direct_splice_actor+0x126/0x1a0 [ 1359.073419] splice_direct_to_actor+0x369/0x970 [ 1359.078112] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1359.082975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.088617] ? do_splice_to+0x190/0x190 [ 1359.092616] ? rw_verify_area+0x118/0x360 [ 1359.096781] do_splice_direct+0x1da/0x2a0 [ 1359.100945] ? splice_direct_to_actor+0x970/0x970 [ 1359.105805] ? rcu_read_lock_sched_held+0x110/0x130 [ 1359.110832] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1359.115614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.121178] ? __sb_start_write+0x1ac/0x360 [ 1359.125526] do_sendfile+0x597/0xd00 [ 1359.129268] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1359.133865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1359.139502] ? put_timespec64+0xda/0x140 [ 1359.143601] __x64_sys_sendfile64+0x1dd/0x220 [ 1359.148125] ? __ia32_sys_sendfile+0x230/0x230 [ 1359.152725] ? do_syscall_64+0x26/0x610 [ 1359.156712] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1359.161308] ? trace_hardirqs_on+0x67/0x230 [ 1359.165655] do_syscall_64+0x103/0x610 [ 1359.169565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1359.174769] RIP: 0033:0x457e29 [ 1359.177975] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1359.196895] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1359.204634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1359.211929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1359.219234] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1359.226535] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1359.233832] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 1359.249762] memory: usage 88216kB, limit 30720kB, failcnt 21 [ 1359.272449] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1359.284741] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1359.294511] Memory cgroup stats for /syz4: cache:132KB rss:72196KB rss_huge:65536KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72128KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1359.316260] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15919,uid=0 [ 1359.332431] Memory cgroup out of memory: Kill process 15919 (syz-executor.4) score 2156 or sacrifice child [ 1359.344407] Killed process 15935 (syz-executor.4) total-vm:72712kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 1359.383925] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1359.394629] CPU: 1 PID: 20350 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1359.401936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.411314] Call Trace: [ 1359.413936] dump_stack+0x172/0x1f0 [ 1359.417601] dump_header+0x10f/0xb6c [ 1359.421336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1359.426465] ? ___ratelimit+0x60/0x595 [ 1359.430373] ? do_raw_spin_unlock+0x57/0x270 [ 1359.434817] oom_kill_process.cold+0x10/0x6f5 [ 1359.439345] ? task_will_free_mem+0x139/0x6e0 [ 1359.443880] out_of_memory+0x79a/0x1280 [ 1359.447897] ? oom_killer_disable+0x280/0x280 [ 1359.452422] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1359.457571] mem_cgroup_out_of_memory+0x99/0xe0 [ 1359.462278] ? memcg_memory_event+0x40/0x40 [ 1359.466641] ? _raw_spin_unlock+0x2d/0x50 [ 1359.470813] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1359.475944] try_charge+0xfec/0x1570 [ 1359.479674] ? find_held_lock+0x35/0x130 [ 1359.483765] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1359.488634] ? kasan_check_read+0x11/0x20 [ 1359.492805] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1359.497666] mem_cgroup_try_charge+0x24d/0x5e0 [ 1359.502275] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1359.507228] __handle_mm_fault+0x1e26/0x3f20 [ 1359.511664] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1359.516524] ? find_held_lock+0x35/0x130 [ 1359.520615] ? handle_mm_fault+0x322/0xb30 [ 1359.524886] ? kasan_check_read+0x11/0x20 [ 1359.529055] handle_mm_fault+0x43f/0xb30 [ 1359.533157] __do_page_fault+0x5da/0xd60 [ 1359.537253] do_page_fault+0x71/0x581 [ 1359.541070] ? page_fault+0x8/0x30 [ 1359.544634] page_fault+0x1e/0x30 [ 1359.548100] RIP: 0033:0x40f98f [ 1359.551302] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1359.570226] RSP: 002b:00007ffddd711580 EFLAGS: 00010206 [ 1359.575611] RAX: 00007f4d33f40000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 1359.582898] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1359.590188] RBP: 00007ffddd711660 R08: ffffffffffffffff R09: 0000000000000000 [ 1359.597474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddd711740 [ 1359.604769] R13: 00007f4d33f60700 R14: 0000000000000004 R15: 000000000073bfac [ 1359.615255] memory: usage 85772kB, limit 30720kB, failcnt 21 [ 1359.628506] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1359.647218] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1359.660677] Memory cgroup stats for /syz4: cache:132KB rss:70056KB rss_huge:63488KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:69996KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1359.729521] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15919,uid=0 [ 1359.752024] Memory cgroup out of memory: Kill process 15919 (syz-executor.4) score 2156 or sacrifice child [ 1359.770881] Killed process 15919 (syz-executor.4) total-vm:72712kB, anon-rss:2212kB, file-rss:35892kB, shmem-rss:0kB [ 1359.802169] oom_reaper: reaped process 20351 (syz-executor.4), now anon-rss:0kB, file-rss:34708kB, shmem-rss:0kB 19:35:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0xfff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 19:35:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000440)={[{@lazytime='lazytime'}]}) 19:35:37 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)='ip6tnl0\x00') 19:35:37 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'ip6erspan0\x00', 0x3}, 0x18) userfaultfd(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000240)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:35:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 19:35:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1362.315207] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1362.355225] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1362.362482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.371858] Call Trace: [ 1362.374471] dump_stack+0x172/0x1f0 [ 1362.378138] dump_header+0x10f/0xb6c [ 1362.381877] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1362.387002] ? ___ratelimit+0x60/0x595 [ 1362.390911] ? do_raw_spin_unlock+0x57/0x270 [ 1362.395355] oom_kill_process.cold+0x10/0x6f5 [ 1362.399881] ? task_will_free_mem+0x139/0x6e0 [ 1362.404403] ? debug_smp_processor_id+0x1c/0x20 [ 1362.409115] out_of_memory+0x79a/0x1280 [ 1362.413130] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1362.418267] ? oom_killer_disable+0x280/0x280 [ 1362.422789] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1362.427930] mem_cgroup_out_of_memory+0x99/0xe0 [ 1362.432638] ? memcg_memory_event+0x40/0x40 [ 1362.436994] ? _raw_spin_unlock+0x2d/0x50 [ 1362.441168] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1362.441186] try_charge+0xfec/0x1570 [ 1362.441201] ? find_held_lock+0x35/0x130 [ 1362.441224] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1362.441246] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1362.454155] ? find_held_lock+0x35/0x130 [ 1362.454180] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1362.454207] memcg_kmem_charge_memcg+0x7c/0x130 [ 1362.463898] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1362.463923] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1362.472840] memcg_kmem_charge+0x13b/0x340 [ 1362.472864] __alloc_pages_nodemask+0x437/0x710 [ 1362.486878] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1362.500824] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1362.500845] ? trace_hardirqs_on+0x67/0x230 [ 1362.500861] ? kasan_check_read+0x11/0x20 [ 1362.500887] copy_process.part.0+0x3e0/0x79a0 [ 1362.500909] ? debug_smp_processor_id+0x1c/0x20 [ 1362.513979] ? perf_trace_lock+0xeb/0x510 [ 1362.513996] ? mark_held_locks+0x100/0x100 [ 1362.514013] ? zap_class+0x460/0x460 [ 1362.514033] ? debug_smp_processor_id+0x1c/0x20 [ 1362.527377] ? __might_fault+0x12b/0x1e0 [ 1362.527410] ? __cleanup_sighand+0x70/0x70 [ 1362.527430] ? lock_downgrade+0x810/0x810 [ 1362.527459] _do_fork+0x257/0xfe0 [ 1362.548408] ? fork_idle+0x1d0/0x1d0 [ 1362.548440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1362.548459] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1362.569305] ? do_syscall_64+0x26/0x610 [ 1362.569324] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1362.569337] ? do_syscall_64+0x26/0x610 [ 1362.569362] __x64_sys_clone+0xbf/0x150 [ 1362.587143] do_syscall_64+0x103/0x610 [ 1362.591054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1362.591069] RIP: 0033:0x4563fa [ 1362.591096] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1362.591105] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1362.591119] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1362.591127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1362.591136] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1362.591145] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1362.591157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 19:35:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1362.669058] memory: usage 83076kB, limit 30720kB, failcnt 54 [ 1362.680434] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1362.731578] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1362.759428] Memory cgroup stats for /syz4: cache:132KB rss:67884KB rss_huge:61440KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:67724KB inactive_file:4KB active_file:4KB unevictable:0KB 19:35:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1362.842601] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16419,uid=0 [ 1362.907836] Memory cgroup out of memory: Kill process 16419 (syz-executor.4) score 2155 or sacrifice child [ 1362.957042] Killed process 16423 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1363.091758] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1363.125031] IPVS: ftp: loaded support on port[0] = 21 [ 1363.153304] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1363.160528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.160535] Call Trace: [ 1363.160562] dump_stack+0x172/0x1f0 [ 1363.160588] dump_header+0x10f/0xb6c [ 1363.160604] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1363.160620] ? ___ratelimit+0x60/0x595 [ 1363.160634] ? do_raw_spin_unlock+0x57/0x270 [ 1363.160655] oom_kill_process.cold+0x10/0x6f5 [ 1363.160676] ? task_will_free_mem+0x139/0x6e0 [ 1363.160691] ? debug_smp_processor_id+0x1c/0x20 [ 1363.160715] out_of_memory+0x79a/0x1280 [ 1363.160745] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1363.160763] ? oom_killer_disable+0x280/0x280 [ 1363.160779] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1363.160806] mem_cgroup_out_of_memory+0x99/0xe0 [ 1363.160822] ? memcg_memory_event+0x40/0x40 [ 1363.160846] ? _raw_spin_unlock+0x2d/0x50 [ 1363.160862] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1363.244064] try_charge+0xfec/0x1570 [ 1363.247794] ? find_held_lock+0x35/0x130 [ 1363.251867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1363.256714] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1363.261564] ? find_held_lock+0x35/0x130 [ 1363.265632] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1363.270490] memcg_kmem_charge_memcg+0x7c/0x130 [ 1363.275163] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1363.279667] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1363.284515] memcg_kmem_charge+0x13b/0x340 [ 1363.288758] __alloc_pages_nodemask+0x437/0x710 [ 1363.293436] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1363.298465] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1363.303055] ? trace_hardirqs_on+0x67/0x230 [ 1363.307393] ? kasan_check_read+0x11/0x20 [ 1363.311553] copy_process.part.0+0x3e0/0x79a0 [ 1363.316061] ? debug_smp_processor_id+0x1c/0x20 [ 1363.320745] ? perf_trace_lock+0xeb/0x510 [ 1363.324916] ? mark_held_locks+0x100/0x100 [ 1363.329171] ? zap_class+0x460/0x460 [ 1363.332891] ? debug_smp_processor_id+0x1c/0x20 [ 1363.337565] ? __might_fault+0x12b/0x1e0 [ 1363.341645] ? __cleanup_sighand+0x70/0x70 [ 1363.345888] ? lock_downgrade+0x810/0x810 [ 1363.350060] _do_fork+0x257/0xfe0 [ 1363.353539] ? fork_idle+0x1d0/0x1d0 [ 1363.357268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1363.362028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1363.366806] ? do_syscall_64+0x26/0x610 [ 1363.370785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1363.376411] ? do_syscall_64+0x26/0x610 [ 1363.380393] __x64_sys_clone+0xbf/0x150 [ 1363.384379] do_syscall_64+0x103/0x610 [ 1363.388279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1363.393468] RIP: 0033:0x4563fa [ 1363.396663] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1363.415563] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1363.423277] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1363.430542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1363.437813] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1363.445091] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1363.452390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1363.475259] IPVS: ftp: loaded support on port[0] = 21 [ 1363.670145] IPVS: ftp: loaded support on port[0] = 21 19:35:39 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'ip6erspan0\x00', 0x3}, 0x18) userfaultfd(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000240)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1363.922231] memory: usage 80940kB, limit 30720kB, failcnt 61 [ 1363.945057] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1363.958266] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 19:35:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 1363.965480] Memory cgroup stats for /syz4: cache:132KB rss:65732KB rss_huge:59392KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:65596KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1364.011283] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16419,uid=0 [ 1364.030579] Memory cgroup out of memory: Kill process 16419 (syz-executor.4) score 2155 or sacrifice child [ 1364.061929] Killed process 16419 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35888kB, shmem-rss:0kB [ 1364.157319] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1364.220892] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1364.228131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.228138] Call Trace: [ 1364.228165] dump_stack+0x172/0x1f0 [ 1364.228190] dump_header+0x10f/0xb6c [ 1364.247480] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1364.252601] ? ___ratelimit+0x60/0x595 [ 1364.256503] ? do_raw_spin_unlock+0x57/0x270 [ 1364.260933] oom_kill_process.cold+0x10/0x6f5 [ 1364.265449] ? task_will_free_mem+0x139/0x6e0 [ 1364.269955] ? debug_smp_processor_id+0x1c/0x20 [ 1364.274648] out_of_memory+0x79a/0x1280 [ 1364.278646] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1364.283764] ? oom_killer_disable+0x280/0x280 [ 1364.288269] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1364.293397] mem_cgroup_out_of_memory+0x99/0xe0 [ 1364.293414] ? memcg_memory_event+0x40/0x40 [ 1364.302426] ? _raw_spin_unlock+0x2d/0x50 [ 1364.306584] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1364.311703] try_charge+0xfec/0x1570 [ 1364.311719] ? find_held_lock+0x35/0x130 [ 1364.311743] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1364.311761] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1364.311777] ? find_held_lock+0x35/0x130 [ 1364.324387] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1364.324416] memcg_kmem_charge_memcg+0x7c/0x130 [ 1364.333308] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1364.333330] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1364.333348] memcg_kmem_charge+0x13b/0x340 [ 1364.333370] __alloc_pages_nodemask+0x437/0x710 [ 1364.361066] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1364.366110] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1364.366129] ? trace_hardirqs_on+0x67/0x230 [ 1364.366148] ? kasan_check_read+0x11/0x20 [ 1364.379231] copy_process.part.0+0x3e0/0x79a0 [ 1364.383743] ? debug_smp_processor_id+0x1c/0x20 [ 1364.388422] ? perf_trace_lock+0xeb/0x510 [ 1364.388438] ? mark_held_locks+0x100/0x100 [ 1364.388456] ? zap_class+0x460/0x460 [ 1364.388472] ? debug_smp_processor_id+0x1c/0x20 [ 1364.405206] ? __might_fault+0x12b/0x1e0 [ 1364.405235] ? __cleanup_sighand+0x70/0x70 [ 1364.413516] ? lock_downgrade+0x810/0x810 [ 1364.417712] _do_fork+0x257/0xfe0 [ 1364.417735] ? fork_idle+0x1d0/0x1d0 [ 1364.424897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1364.429660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1364.434422] ? do_syscall_64+0x26/0x610 [ 1364.434439] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1364.434456] ? do_syscall_64+0x26/0x610 [ 1364.443789] __x64_sys_clone+0xbf/0x150 [ 1364.443811] do_syscall_64+0x103/0x610 [ 1364.443831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1364.455637] RIP: 0033:0x4563fa [ 1364.464005] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1364.482913] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1364.482930] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1364.482939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1364.482947] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1364.482956] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 19:35:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 1364.482964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1364.543671] memory: usage 78452kB, limit 30720kB, failcnt 67 [ 1364.549512] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1364.584585] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1364.608761] Memory cgroup stats for /syz4: cache:132KB rss:63576KB rss_huge:57344KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:63424KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1364.683743] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15972,uid=0 [ 1364.732977] Memory cgroup out of memory: Kill process 15972 (syz-executor.4) score 2155 or sacrifice child [ 1364.766795] Killed process 15972 (syz-executor.4) total-vm:72712kB, anon-rss:2212kB, file-rss:35872kB, shmem-rss:0kB 19:35:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 1364.901636] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1364.961102] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1364.968319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.968326] Call Trace: [ 1364.968351] dump_stack+0x172/0x1f0 [ 1364.968378] dump_header+0x10f/0xb6c [ 1364.968397] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1364.992749] ? ___ratelimit+0x60/0x595 [ 1364.996650] ? do_raw_spin_unlock+0x57/0x270 [ 1364.996676] oom_kill_process.cold+0x10/0x6f5 [ 1364.996700] ? task_will_free_mem+0x139/0x6e0 [ 1364.996718] ? debug_smp_processor_id+0x1c/0x20 [ 1364.996743] out_of_memory+0x79a/0x1280 [ 1364.996766] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1364.996785] ? oom_killer_disable+0x280/0x280 [ 1364.996801] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1364.996830] mem_cgroup_out_of_memory+0x99/0xe0 [ 1365.010210] ? memcg_memory_event+0x40/0x40 [ 1365.033520] ? _raw_spin_unlock+0x2d/0x50 [ 1365.033540] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1365.033556] try_charge+0xfec/0x1570 [ 1365.033571] ? find_held_lock+0x35/0x130 [ 1365.033595] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1365.033613] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1365.033628] ? find_held_lock+0x35/0x130 [ 1365.033647] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1365.033674] memcg_kmem_charge_memcg+0x7c/0x130 [ 1365.055594] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1365.055619] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1365.055639] memcg_kmem_charge+0x13b/0x340 [ 1365.055662] __alloc_pages_nodemask+0x437/0x710 [ 1365.055684] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1365.055706] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1365.055724] ? trace_hardirqs_on+0x67/0x230 [ 1365.055742] ? kasan_check_read+0x11/0x20 [ 1365.069473] copy_process.part.0+0x3e0/0x79a0 [ 1365.069497] ? debug_smp_processor_id+0x1c/0x20 [ 1365.069511] ? perf_trace_lock+0xeb/0x510 [ 1365.069527] ? mark_held_locks+0x100/0x100 [ 1365.083103] ? zap_class+0x460/0x460 [ 1365.083120] ? debug_smp_processor_id+0x1c/0x20 [ 1365.083140] ? __might_fault+0x12b/0x1e0 [ 1365.083168] ? __cleanup_sighand+0x70/0x70 [ 1365.083186] ? lock_downgrade+0x810/0x810 [ 1365.083221] _do_fork+0x257/0xfe0 [ 1365.083246] ? fork_idle+0x1d0/0x1d0 [ 1365.083275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1365.083287] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1365.083300] ? do_syscall_64+0x26/0x610 [ 1365.083315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1365.083328] ? do_syscall_64+0x26/0x610 [ 1365.083352] __x64_sys_clone+0xbf/0x150 [ 1365.191764] do_syscall_64+0x103/0x610 [ 1365.195665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1365.200856] RIP: 0033:0x4563fa [ 1365.204054] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1365.222969] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1365.230685] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1365.237954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1365.245222] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1365.252490] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1365.259758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 19:35:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 19:35:40 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'ip6erspan0\x00', 0x3}, 0x18) userfaultfd(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000240)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1365.816478] memory: usage 76024kB, limit 30720kB, failcnt 73 [ 1365.822930] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1365.830360] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1365.837012] Memory cgroup stats for /syz4: cache:132KB rss:61428KB rss_huge:55296KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:61276KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1365.858645] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16006,uid=0 [ 1365.901237] Memory cgroup out of memory: Kill process 16006 (syz-executor.4) score 2155 or sacrifice child 19:35:41 executing program 2: open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x45000}], 0x1, 0x0) [ 1365.922560] Killed process 16021 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 1366.010679] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1366.051873] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1366.059099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.068469] Call Trace: [ 1366.071068] dump_stack+0x172/0x1f0 [ 1366.074751] dump_header+0x10f/0xb6c [ 1366.078510] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1366.083629] ? ___ratelimit+0x60/0x595 [ 1366.087527] ? do_raw_spin_unlock+0x57/0x270 [ 1366.091960] oom_kill_process.cold+0x10/0x6f5 [ 1366.096483] ? task_will_free_mem+0x139/0x6e0 [ 1366.101042] ? debug_smp_processor_id+0x1c/0x20 [ 1366.105734] out_of_memory+0x79a/0x1280 [ 1366.109730] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.114936] ? oom_killer_disable+0x280/0x280 [ 1366.119453] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.124591] mem_cgroup_out_of_memory+0x99/0xe0 [ 1366.129280] ? memcg_memory_event+0x40/0x40 [ 1366.133633] ? _raw_spin_unlock+0x2d/0x50 [ 1366.137790] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.142915] try_charge+0xfec/0x1570 [ 1366.146741] ? find_held_lock+0x35/0x130 [ 1366.150825] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1366.155688] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1366.160546] ? find_held_lock+0x35/0x130 [ 1366.164629] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1366.169499] memcg_kmem_charge_memcg+0x7c/0x130 [ 1366.174296] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1366.178820] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1366.183681] memcg_kmem_charge+0x13b/0x340 [ 1366.187934] __alloc_pages_nodemask+0x437/0x710 [ 1366.192629] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1366.197695] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1366.202294] ? trace_hardirqs_on+0x67/0x230 [ 1366.206633] ? kasan_check_read+0x11/0x20 [ 1366.210807] copy_process.part.0+0x3e0/0x79a0 [ 1366.215321] ? debug_smp_processor_id+0x1c/0x20 [ 1366.219998] ? perf_trace_lock+0xeb/0x510 [ 1366.224165] ? mark_held_locks+0x100/0x100 [ 1366.228415] ? zap_class+0x460/0x460 [ 1366.232145] ? debug_smp_processor_id+0x1c/0x20 [ 1366.236832] ? __might_fault+0x12b/0x1e0 [ 1366.240916] ? __cleanup_sighand+0x70/0x70 [ 1366.245164] ? lock_downgrade+0x810/0x810 [ 1366.249346] _do_fork+0x257/0xfe0 [ 1366.252824] ? fork_idle+0x1d0/0x1d0 [ 1366.256562] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1366.261361] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1366.266135] ? do_syscall_64+0x26/0x610 [ 1366.270135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.275510] ? do_syscall_64+0x26/0x610 [ 1366.279527] __x64_sys_clone+0xbf/0x150 [ 1366.283695] do_syscall_64+0x103/0x610 [ 1366.287610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.292819] RIP: 0033:0x4563fa [ 1366.296029] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1366.314941] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1366.322788] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1366.330070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1366.337540] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1366.344828] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1366.352125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1366.361539] memory: usage 73744kB, limit 30720kB, failcnt 79 [ 1366.367964] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1366.446591] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1366.453843] Memory cgroup stats for /syz4: cache:132KB rss:59196KB rss_huge:53248KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:59152KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1366.475246] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16006,uid=0 [ 1366.498776] Memory cgroup out of memory: Kill process 16006 (syz-executor.4) score 2155 or sacrifice child [ 1366.522975] Killed process 16006 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35876kB, shmem-rss:0kB [ 1366.575102] oom_reaper: reaped process 16006 (syz-executor.4), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 1366.598038] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 19:35:41 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa42478c4, 0x102005, 0x0, 0xfffffffffffffdad) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0xfffffffffffffeff) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3c", 0xac, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 1366.713002] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1366.720267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.729716] Call Trace: [ 1366.732336] dump_stack+0x172/0x1f0 [ 1366.735986] dump_header+0x10f/0xb6c [ 1366.739723] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1366.744841] ? ___ratelimit+0x60/0x595 [ 1366.748741] ? do_raw_spin_unlock+0x57/0x270 [ 1366.753179] oom_kill_process.cold+0x10/0x6f5 [ 1366.757707] ? task_will_free_mem+0x139/0x6e0 [ 1366.762230] ? debug_smp_processor_id+0x1c/0x20 [ 1366.766926] out_of_memory+0x79a/0x1280 [ 1366.770915] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.776039] ? oom_killer_disable+0x280/0x280 [ 1366.780544] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.785695] mem_cgroup_out_of_memory+0x99/0xe0 [ 1366.790381] ? memcg_memory_event+0x40/0x40 [ 1366.794747] ? _raw_spin_unlock+0x2d/0x50 [ 1366.798903] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1366.804022] try_charge+0xfec/0x1570 [ 1366.807745] ? find_held_lock+0x35/0x130 [ 1366.811824] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1366.816722] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1366.821707] ? find_held_lock+0x35/0x130 [ 1366.825783] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1366.830656] memcg_kmem_charge_memcg+0x7c/0x130 [ 1366.835337] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1366.839880] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1366.844750] memcg_kmem_charge+0x13b/0x340 [ 1366.849007] __alloc_pages_nodemask+0x437/0x710 [ 1366.853693] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1366.858815] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1366.863421] ? trace_hardirqs_on+0x67/0x230 [ 1366.867759] ? kasan_check_read+0x11/0x20 [ 1366.871928] copy_process.part.0+0x3e0/0x79a0 [ 1366.876440] ? debug_smp_processor_id+0x1c/0x20 [ 1366.881131] ? perf_trace_lock+0xeb/0x510 [ 1366.885290] ? mark_held_locks+0x100/0x100 [ 1366.889536] ? zap_class+0x460/0x460 [ 1366.893273] ? debug_smp_processor_id+0x1c/0x20 [ 1366.897957] ? __might_fault+0x12b/0x1e0 [ 1366.902046] ? __cleanup_sighand+0x70/0x70 [ 1366.906303] ? lock_downgrade+0x810/0x810 [ 1366.910574] _do_fork+0x257/0xfe0 [ 1366.914049] ? fork_idle+0x1d0/0x1d0 [ 1366.917790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1366.922551] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1366.927323] ? do_syscall_64+0x26/0x610 [ 1366.931306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.936677] ? do_syscall_64+0x26/0x610 [ 1366.940666] __x64_sys_clone+0xbf/0x150 [ 1366.944655] do_syscall_64+0x103/0x610 [ 1366.948553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1366.953744] RIP: 0033:0x4563fa [ 1366.956943] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1366.975849] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1366.983564] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1366.990837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1366.998140] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1367.005453] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1367.012741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1367.351104] memory: usage 71408kB, limit 30720kB, failcnt 85 [ 1367.357007] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1367.387442] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1367.420839] Memory cgroup stats for /syz4: cache:132KB rss:57032KB rss_huge:51200KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56980KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1367.640793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16432,uid=0 [ 1367.670878] Memory cgroup out of memory: Kill process 16432 (syz-executor.4) score 2155 or sacrifice child [ 1367.680905] Killed process 16432 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35876kB, shmem-rss:0kB [ 1367.795157] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1367.810866] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1367.818099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.827461] Call Trace: [ 1367.830071] dump_stack+0x172/0x1f0 [ 1367.833734] dump_header+0x10f/0xb6c [ 1367.837458] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1367.842571] ? ___ratelimit+0x60/0x595 [ 1367.846470] ? do_raw_spin_unlock+0x57/0x270 [ 1367.850897] oom_kill_process.cold+0x10/0x6f5 [ 1367.855411] ? task_will_free_mem+0x139/0x6e0 [ 1367.859917] ? debug_smp_processor_id+0x1c/0x20 [ 1367.864635] out_of_memory+0x79a/0x1280 [ 1367.868628] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1367.873744] ? oom_killer_disable+0x280/0x280 [ 1367.878248] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1367.883373] mem_cgroup_out_of_memory+0x99/0xe0 [ 1367.888050] ? memcg_memory_event+0x40/0x40 [ 1367.892390] ? _raw_spin_unlock+0x2d/0x50 [ 1367.896543] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1367.901651] try_charge+0xfec/0x1570 [ 1367.905372] ? find_held_lock+0x35/0x130 [ 1367.909450] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1367.914299] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1367.919150] ? find_held_lock+0x35/0x130 [ 1367.923220] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1367.928082] memcg_kmem_charge_memcg+0x7c/0x130 [ 1367.932789] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1367.937295] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1367.942146] memcg_kmem_charge+0x13b/0x340 [ 1367.946393] __alloc_pages_nodemask+0x437/0x710 [ 1367.951073] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1367.956120] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1367.960715] ? trace_hardirqs_on+0x67/0x230 [ 1367.965039] ? kasan_check_read+0x11/0x20 [ 1367.969201] copy_process.part.0+0x3e0/0x79a0 [ 1367.973709] ? debug_smp_processor_id+0x1c/0x20 [ 1367.978399] ? perf_trace_lock+0xeb/0x510 [ 1367.982550] ? mark_held_locks+0x100/0x100 [ 1367.986793] ? zap_class+0x460/0x460 [ 1367.990514] ? debug_smp_processor_id+0x1c/0x20 [ 1367.995190] ? __might_fault+0x12b/0x1e0 [ 1367.999275] ? __cleanup_sighand+0x70/0x70 [ 1368.003519] ? lock_downgrade+0x810/0x810 [ 1368.007696] _do_fork+0x257/0xfe0 [ 1368.011165] ? fork_idle+0x1d0/0x1d0 [ 1368.014898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1368.019657] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1368.024417] ? do_syscall_64+0x26/0x610 [ 1368.028398] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.033794] ? do_syscall_64+0x26/0x610 [ 1368.037785] __x64_sys_clone+0xbf/0x150 [ 1368.041770] do_syscall_64+0x103/0x610 [ 1368.045671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.050866] RIP: 0033:0x4563fa [ 1368.054323] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1368.073227] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1368.080943] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1368.088216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1368.095488] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1368.102763] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1368.110041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1368.450807] memory: usage 69084kB, limit 30720kB, failcnt 91 [ 1368.456661] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1368.471114] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1368.477305] Memory cgroup stats for /syz4: cache:132KB rss:54872KB rss_huge:49152KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54820KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1368.530791] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16446,uid=0 [ 1368.570812] Memory cgroup out of memory: Kill process 16446 (syz-executor.4) score 2154 or sacrifice child [ 1368.580730] Killed process 16446 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35864kB, shmem-rss:0kB [ 1368.612581] oom_reaper: reaped process 16446 (syz-executor.4), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 1368.634996] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1368.670817] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1368.678041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.687407] Call Trace: [ 1368.690016] dump_stack+0x172/0x1f0 [ 1368.693679] dump_header+0x10f/0xb6c [ 1368.697417] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1368.702531] ? ___ratelimit+0x60/0x595 [ 1368.706427] ? do_raw_spin_unlock+0x57/0x270 [ 1368.710860] oom_kill_process.cold+0x10/0x6f5 [ 1368.715373] ? task_will_free_mem+0x139/0x6e0 [ 1368.719877] ? debug_smp_processor_id+0x1c/0x20 [ 1368.724563] out_of_memory+0x79a/0x1280 [ 1368.728562] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1368.733678] ? oom_killer_disable+0x280/0x280 [ 1368.738183] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1368.743310] mem_cgroup_out_of_memory+0x99/0xe0 [ 1368.747985] ? memcg_memory_event+0x40/0x40 [ 1368.752346] ? _raw_spin_unlock+0x2d/0x50 [ 1368.756502] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1368.761621] try_charge+0xfec/0x1570 [ 1368.765340] ? find_held_lock+0x35/0x130 [ 1368.769415] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1368.774264] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1368.779122] ? find_held_lock+0x35/0x130 [ 1368.783195] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1368.788061] memcg_kmem_charge_memcg+0x7c/0x130 [ 1368.792748] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1368.797256] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1368.802119] memcg_kmem_charge+0x13b/0x340 [ 1368.806367] __alloc_pages_nodemask+0x437/0x710 [ 1368.811049] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1368.816076] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1368.820678] ? trace_hardirqs_on+0x67/0x230 [ 1368.825008] ? kasan_check_read+0x11/0x20 [ 1368.829172] copy_process.part.0+0x3e0/0x79a0 [ 1368.833679] ? debug_smp_processor_id+0x1c/0x20 [ 1368.838354] ? perf_trace_lock+0xeb/0x510 [ 1368.842508] ? mark_held_locks+0x100/0x100 [ 1368.846754] ? zap_class+0x460/0x460 [ 1368.850480] ? debug_smp_processor_id+0x1c/0x20 [ 1368.855158] ? __might_fault+0x12b/0x1e0 [ 1368.859240] ? __cleanup_sighand+0x70/0x70 [ 1368.863483] ? lock_downgrade+0x810/0x810 [ 1368.868266] _do_fork+0x257/0xfe0 [ 1368.871733] ? fork_idle+0x1d0/0x1d0 [ 1368.875468] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1368.880228] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1368.884990] ? do_syscall_64+0x26/0x610 [ 1368.888971] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.894338] ? do_syscall_64+0x26/0x610 [ 1368.898325] __x64_sys_clone+0xbf/0x150 [ 1368.902313] do_syscall_64+0x103/0x610 [ 1368.906210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1368.911406] RIP: 0033:0x4563fa [ 1368.914643] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1368.933553] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1368.941265] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1368.948539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1368.955811] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1368.963082] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1368.970369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1368.988580] memory: usage 66740kB, limit 30720kB, failcnt 109 [ 1369.007702] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1369.050809] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1369.056980] Memory cgroup stats for /syz4: cache:132KB rss:52692KB rss_huge:47104KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52640KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1369.275962] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15865,uid=0 [ 1369.290813] Memory cgroup out of memory: Kill process 15865 (syz-executor.4) score 2154 or sacrifice child [ 1369.300723] Killed process 15865 (syz-executor.4) total-vm:72844kB, anon-rss:2220kB, file-rss:35828kB, shmem-rss:0kB [ 1369.315193] oom_reaper: reaped process 15865 (syz-executor.4), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 1369.320514] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1369.339460] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1369.346970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.356329] Call Trace: [ 1369.358916] dump_stack+0x172/0x1f0 [ 1369.362543] dump_header+0x10f/0xb6c [ 1369.366254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1369.371348] ? ___ratelimit+0x60/0x595 [ 1369.375224] ? do_raw_spin_unlock+0x57/0x270 [ 1369.379636] oom_kill_process.cold+0x10/0x6f5 [ 1369.384136] ? task_will_free_mem+0x139/0x6e0 [ 1369.388634] ? debug_smp_processor_id+0x1c/0x20 [ 1369.393296] out_of_memory+0x79a/0x1280 [ 1369.397265] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.402363] ? oom_killer_disable+0x280/0x280 [ 1369.406846] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.411958] mem_cgroup_out_of_memory+0x99/0xe0 [ 1369.416625] ? memcg_memory_event+0x40/0x40 [ 1369.420939] ? _raw_spin_unlock+0x2d/0x50 [ 1369.425082] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.430188] try_charge+0xfec/0x1570 [ 1369.433896] ? find_held_lock+0x35/0x130 [ 1369.437962] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1369.442804] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1369.447655] ? find_held_lock+0x35/0x130 [ 1369.451720] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1369.456582] memcg_kmem_charge_memcg+0x7c/0x130 [ 1369.461282] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1369.465776] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1369.470627] memcg_kmem_charge+0x13b/0x340 [ 1369.474858] __alloc_pages_nodemask+0x437/0x710 [ 1369.479522] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1369.484537] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1369.489115] ? trace_hardirqs_on+0x67/0x230 [ 1369.493448] ? kasan_check_read+0x11/0x20 [ 1369.497613] copy_process.part.0+0x3e0/0x79a0 [ 1369.502111] ? debug_smp_processor_id+0x1c/0x20 [ 1369.506772] ? perf_trace_lock+0xeb/0x510 [ 1369.510906] ? mark_held_locks+0x100/0x100 [ 1369.515131] ? zap_class+0x460/0x460 [ 1369.518836] ? debug_smp_processor_id+0x1c/0x20 [ 1369.523495] ? __might_fault+0x12b/0x1e0 [ 1369.527552] ? __cleanup_sighand+0x70/0x70 [ 1369.531780] ? lock_downgrade+0x810/0x810 [ 1369.535941] _do_fork+0x257/0xfe0 [ 1369.539405] ? fork_idle+0x1d0/0x1d0 [ 1369.543124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1369.547865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1369.552613] ? do_syscall_64+0x26/0x610 [ 1369.556573] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1369.561926] ? do_syscall_64+0x26/0x610 [ 1369.565890] __x64_sys_clone+0xbf/0x150 [ 1369.569853] do_syscall_64+0x103/0x610 [ 1369.573751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1369.578928] RIP: 0033:0x4563fa [ 1369.582120] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1369.601025] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1369.608722] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1369.615993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1369.623249] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1369.630502] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1369.637756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1369.652351] memory: usage 64308kB, limit 30720kB, failcnt 115 [ 1369.658284] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1369.685143] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1369.711156] Memory cgroup stats for /syz4: cache:132KB rss:50596KB rss_huge:45056KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:50540KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1369.770852] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=/group.stat,pid=14783,uid=0 [ 1369.801920] Memory cgroup out of memory: Kill process 14783 (/group.stat) score 2153 or sacrifice child [ 1369.820917] Killed process 14783 (/group.stat) total-vm:72580kB, anon-rss:2192kB, file-rss:35840kB, shmem-rss:0kB [ 1369.863232] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1369.917132] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1369.924382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.933754] Call Trace: [ 1369.936364] dump_stack+0x172/0x1f0 [ 1369.940010] dump_header+0x10f/0xb6c [ 1369.943738] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1369.948862] ? ___ratelimit+0x60/0x595 [ 1369.952757] ? do_raw_spin_unlock+0x57/0x270 [ 1369.957180] oom_kill_process.cold+0x10/0x6f5 [ 1369.961694] ? task_will_free_mem+0x139/0x6e0 [ 1369.966197] ? debug_smp_processor_id+0x1c/0x20 [ 1369.970879] out_of_memory+0x79a/0x1280 [ 1369.974865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.979980] ? oom_killer_disable+0x280/0x280 [ 1369.984486] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1369.989612] mem_cgroup_out_of_memory+0x99/0xe0 [ 1369.994305] ? memcg_memory_event+0x40/0x40 [ 1369.998643] ? _raw_spin_unlock+0x2d/0x50 [ 1370.002799] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.007924] try_charge+0xfec/0x1570 [ 1370.011935] ? find_held_lock+0x35/0x130 [ 1370.016010] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1370.020859] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.025709] ? find_held_lock+0x35/0x130 [ 1370.029778] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.034645] memcg_kmem_charge_memcg+0x7c/0x130 [ 1370.039320] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1370.043828] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1370.048681] memcg_kmem_charge+0x13b/0x340 [ 1370.052931] __alloc_pages_nodemask+0x437/0x710 [ 1370.057631] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1370.062663] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1370.067256] ? trace_hardirqs_on+0x67/0x230 [ 1370.071589] ? kasan_check_read+0x11/0x20 [ 1370.075759] copy_process.part.0+0x3e0/0x79a0 [ 1370.080264] ? debug_smp_processor_id+0x1c/0x20 [ 1370.084935] ? perf_trace_lock+0xeb/0x510 [ 1370.089110] ? mark_held_locks+0x100/0x100 [ 1370.093354] ? zap_class+0x460/0x460 [ 1370.097076] ? debug_smp_processor_id+0x1c/0x20 [ 1370.101778] ? __might_fault+0x12b/0x1e0 [ 1370.105857] ? __cleanup_sighand+0x70/0x70 [ 1370.110108] ? lock_downgrade+0x810/0x810 [ 1370.114280] _do_fork+0x257/0xfe0 [ 1370.117770] ? fork_idle+0x1d0/0x1d0 [ 1370.121504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1370.126263] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1370.131022] ? do_syscall_64+0x26/0x610 [ 1370.134999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1370.140373] ? do_syscall_64+0x26/0x610 [ 1370.144358] __x64_sys_clone+0xbf/0x150 [ 1370.148340] do_syscall_64+0x103/0x610 [ 1370.152779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1370.157971] RIP: 0033:0x4563fa [ 1370.161168] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1370.180168] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1370.187881] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1370.195150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1370.202425] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1370.209714] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1370.216987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1370.224802] memory: usage 61952kB, limit 30720kB, failcnt 121 [ 1370.231135] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1370.237928] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1370.244334] Memory cgroup stats for /syz4: cache:132KB rss:48436KB rss_huge:43008KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:48380KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1370.265497] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15341,uid=0 [ 1370.280413] Memory cgroup out of memory: Kill process 15341 (syz-executor.4) score 2153 or sacrifice child [ 1370.290896] Killed process 15341 (syz-executor.4) total-vm:72844kB, anon-rss:2220kB, file-rss:35812kB, shmem-rss:0kB [ 1370.303650] oom_reaper: reaped process 15341 (syz-executor.4), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1370.324675] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1370.343804] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1370.351007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.360368] Call Trace: [ 1370.362979] dump_stack+0x172/0x1f0 [ 1370.366632] dump_header+0x10f/0xb6c [ 1370.370362] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1370.375477] ? ___ratelimit+0x60/0x595 [ 1370.379374] ? do_raw_spin_unlock+0x57/0x270 [ 1370.383797] oom_kill_process.cold+0x10/0x6f5 [ 1370.388310] ? task_will_free_mem+0x139/0x6e0 [ 1370.392819] ? debug_smp_processor_id+0x1c/0x20 [ 1370.397950] out_of_memory+0x79a/0x1280 [ 1370.401940] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.407052] ? oom_killer_disable+0x280/0x280 [ 1370.411567] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.416718] mem_cgroup_out_of_memory+0x99/0xe0 [ 1370.421402] ? memcg_memory_event+0x40/0x40 [ 1370.425756] ? _raw_spin_unlock+0x2d/0x50 [ 1370.429916] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.435032] try_charge+0xfec/0x1570 [ 1370.438788] ? find_held_lock+0x35/0x130 [ 1370.442875] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1370.447732] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.452592] ? find_held_lock+0x35/0x130 [ 1370.456669] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.461533] memcg_kmem_charge_memcg+0x7c/0x130 [ 1370.466211] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1370.470725] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1370.475580] memcg_kmem_charge+0x13b/0x340 [ 1370.479830] __alloc_pages_nodemask+0x437/0x710 [ 1370.484509] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1370.489540] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1370.494134] ? trace_hardirqs_on+0x67/0x230 [ 1370.498461] ? kasan_check_read+0x11/0x20 [ 1370.502803] copy_process.part.0+0x3e0/0x79a0 [ 1370.507320] ? debug_smp_processor_id+0x1c/0x20 [ 1370.512001] ? perf_trace_lock+0xeb/0x510 [ 1370.516158] ? mark_held_locks+0x100/0x100 [ 1370.520406] ? zap_class+0x460/0x460 [ 1370.524138] ? debug_smp_processor_id+0x1c/0x20 [ 1370.528819] ? __might_fault+0x12b/0x1e0 [ 1370.532905] ? __cleanup_sighand+0x70/0x70 [ 1370.537154] ? lock_downgrade+0x810/0x810 [ 1370.541334] _do_fork+0x257/0xfe0 [ 1370.544815] ? fork_idle+0x1d0/0x1d0 [ 1370.548556] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1370.553324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1370.558117] ? do_syscall_64+0x26/0x610 [ 1370.562109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1370.567479] ? do_syscall_64+0x26/0x610 [ 1370.571471] __x64_sys_clone+0xbf/0x150 [ 1370.575459] do_syscall_64+0x103/0x610 [ 1370.579364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1370.584559] RIP: 0033:0x4563fa [ 1370.588129] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1370.607056] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1370.614793] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1370.622075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1370.629382] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1370.636669] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1370.643951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1370.661907] memory: usage 59612kB, limit 30720kB, failcnt 139 [ 1370.668785] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1370.676889] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1370.686037] Memory cgroup stats for /syz4: cache:132KB rss:46272KB rss_huge:40960KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:46204KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1370.707890] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=/group.stat,pid=14805,uid=0 [ 1370.725051] Memory cgroup out of memory: Kill process 14805 (/group.stat) score 2153 or sacrifice child [ 1370.751176] Killed process 14805 (/group.stat) total-vm:72448kB, anon-rss:2184kB, file-rss:35840kB, shmem-rss:0kB [ 1370.808583] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1370.848912] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1370.856152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.865510] Call Trace: [ 1370.868118] dump_stack+0x172/0x1f0 [ 1370.871763] dump_header+0x10f/0xb6c [ 1370.875485] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1370.880601] ? ___ratelimit+0x60/0x595 [ 1370.884495] ? do_raw_spin_unlock+0x57/0x270 [ 1370.888921] oom_kill_process.cold+0x10/0x6f5 [ 1370.893427] ? task_will_free_mem+0x139/0x6e0 [ 1370.897924] ? debug_smp_processor_id+0x1c/0x20 [ 1370.902611] out_of_memory+0x79a/0x1280 [ 1370.906596] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.911713] ? oom_killer_disable+0x280/0x280 [ 1370.916211] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.921332] mem_cgroup_out_of_memory+0x99/0xe0 [ 1370.926483] ? memcg_memory_event+0x40/0x40 [ 1370.930818] ? _raw_spin_unlock+0x2d/0x50 [ 1370.934972] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1370.940082] try_charge+0xfec/0x1570 [ 1370.943811] ? find_held_lock+0x35/0x130 [ 1370.947884] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1370.952733] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.957581] ? find_held_lock+0x35/0x130 [ 1370.961657] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1370.966549] memcg_kmem_charge_memcg+0x7c/0x130 [ 1370.971224] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1370.975732] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1370.980586] memcg_kmem_charge+0x13b/0x340 [ 1370.985147] __alloc_pages_nodemask+0x437/0x710 [ 1370.989839] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1370.994915] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1370.999515] ? trace_hardirqs_on+0x67/0x230 [ 1371.003854] ? kasan_check_read+0x11/0x20 [ 1371.008020] copy_process.part.0+0x3e0/0x79a0 [ 1371.012527] ? debug_smp_processor_id+0x1c/0x20 [ 1371.017212] ? perf_trace_lock+0xeb/0x510 [ 1371.021365] ? mark_held_locks+0x100/0x100 [ 1371.025611] ? zap_class+0x460/0x460 [ 1371.029332] ? debug_smp_processor_id+0x1c/0x20 [ 1371.034011] ? __might_fault+0x12b/0x1e0 [ 1371.038096] ? __cleanup_sighand+0x70/0x70 [ 1371.042343] ? lock_downgrade+0x810/0x810 [ 1371.046515] _do_fork+0x257/0xfe0 [ 1371.049980] ? fork_idle+0x1d0/0x1d0 [ 1371.053717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.058477] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.063240] ? do_syscall_64+0x26/0x610 [ 1371.067224] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.072593] ? do_syscall_64+0x26/0x610 [ 1371.076582] __x64_sys_clone+0xbf/0x150 [ 1371.080571] do_syscall_64+0x103/0x610 [ 1371.084479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.089671] RIP: 0033:0x4563fa [ 1371.092869] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1371.111778] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1371.119499] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1371.126776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1371.134076] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1371.141362] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1371.148641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1371.158384] memory: usage 57300kB, limit 30720kB, failcnt 145 [ 1371.166153] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1371.173122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1371.179280] Memory cgroup stats for /syz4: cache:132KB rss:44116KB rss_huge:38912KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:44056KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1371.200257] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=7840,uid=0 [ 1371.214877] Memory cgroup out of memory: Kill process 7840 (syz-executor.4) score 2153 or sacrifice child [ 1371.224752] Killed process 7840 (syz-executor.4) total-vm:72448kB, anon-rss:2188kB, file-rss:35832kB, shmem-rss:0kB [ 1371.236945] oom_reaper: reaped process 7840 (syz-executor.4), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 1371.261264] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1371.287472] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1371.294708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.304105] Call Trace: [ 1371.306726] dump_stack+0x172/0x1f0 [ 1371.310393] dump_header+0x10f/0xb6c [ 1371.314141] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1371.319255] ? ___ratelimit+0x60/0x595 [ 1371.323142] ? do_raw_spin_unlock+0x57/0x270 [ 1371.327575] oom_kill_process.cold+0x10/0x6f5 [ 1371.327607] ? task_will_free_mem+0x139/0x6e0 [ 1371.336613] ? __switch_to_asm+0x40/0x70 [ 1371.340699] out_of_memory+0x79a/0x1280 [ 1371.344698] ? oom_killer_disable+0x280/0x280 [ 1371.349232] mem_cgroup_out_of_memory+0x99/0xe0 [ 1371.353921] ? memcg_memory_event+0x40/0x40 [ 1371.358260] ? _raw_spin_unlock+0x41/0x50 [ 1371.362426] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1371.367543] try_charge+0xfec/0x1570 [ 1371.371268] ? find_held_lock+0x35/0x130 [ 1371.375333] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1371.380175] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1371.385031] ? find_held_lock+0x35/0x130 [ 1371.389128] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1371.393998] memcg_kmem_charge_memcg+0x7c/0x130 [ 1371.398682] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1371.403209] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1371.408154] memcg_kmem_charge+0x13b/0x340 [ 1371.412419] __alloc_pages_nodemask+0x437/0x710 [ 1371.417108] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1371.422149] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1371.426763] ? trace_hardirqs_on+0x67/0x230 [ 1371.431119] ? kasan_check_read+0x11/0x20 [ 1371.435288] copy_process.part.0+0x3e0/0x79a0 [ 1371.439796] ? debug_smp_processor_id+0x1c/0x20 [ 1371.444497] ? perf_trace_lock+0xeb/0x510 [ 1371.448652] ? mark_held_locks+0x100/0x100 [ 1371.452889] ? zap_class+0x460/0x460 [ 1371.456625] ? debug_smp_processor_id+0x1c/0x20 [ 1371.461316] ? __might_fault+0x12b/0x1e0 [ 1371.465404] ? __cleanup_sighand+0x70/0x70 [ 1371.469644] ? lock_downgrade+0x810/0x810 [ 1371.473797] _do_fork+0x257/0xfe0 [ 1371.477246] ? fork_idle+0x1d0/0x1d0 [ 1371.480978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.485743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.490503] ? do_syscall_64+0x26/0x610 [ 1371.494473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.499839] ? do_syscall_64+0x26/0x610 [ 1371.503849] __x64_sys_clone+0xbf/0x150 [ 1371.507879] do_syscall_64+0x103/0x610 [ 1371.511801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.517009] RIP: 0033:0x4563fa [ 1371.520222] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1371.539134] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1371.546871] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1371.554140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1371.561405] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1371.568672] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1371.575931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1371.585148] memory: usage 54972kB, limit 30720kB, failcnt 175 [ 1371.591150] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1371.597931] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1371.604184] Memory cgroup stats for /syz4: cache:132KB rss:41928KB rss_huge:36864KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41892KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1371.625145] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=/group.stat,pid=14763,uid=0 [ 1371.639630] Memory cgroup out of memory: Kill process 14763 (/group.stat) score 2153 or sacrifice child [ 1371.649297] Killed process 14763 (/group.stat) total-vm:72448kB, anon-rss:2184kB, file-rss:35836kB, shmem-rss:0kB [ 1371.663262] oom_reaper: reaped process 14763 (/group.stat), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 1371.699455] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1371.712066] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1371.719508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.727316] binder: undelivered TRANSACTION_ERROR: 29189 [ 1371.728871] Call Trace: [ 1371.736927] dump_stack+0x172/0x1f0 [ 1371.740574] dump_header+0x10f/0xb6c [ 1371.744297] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1371.749392] ? ___ratelimit+0x60/0x595 [ 1371.753279] ? do_raw_spin_unlock+0x57/0x270 [ 1371.757704] oom_kill_process.cold+0x10/0x6f5 [ 1371.762232] ? task_will_free_mem+0x139/0x6e0 [ 1371.766734] ? debug_smp_processor_id+0x1c/0x20 [ 1371.771426] out_of_memory+0x79a/0x1280 [ 1371.775414] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1371.780517] ? oom_killer_disable+0x280/0x280 [ 1371.785005] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1371.790127] mem_cgroup_out_of_memory+0x99/0xe0 [ 1371.794797] ? memcg_memory_event+0x40/0x40 [ 1371.799132] ? _raw_spin_unlock+0x2d/0x50 [ 1371.803268] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1371.808367] try_charge+0xfec/0x1570 [ 1371.812084] ? find_held_lock+0x35/0x130 [ 1371.816191] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1371.821060] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1371.825935] ? find_held_lock+0x35/0x130 [ 1371.829988] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1371.834852] memcg_kmem_charge_memcg+0x7c/0x130 [ 1371.839525] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1371.844013] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1371.848859] memcg_kmem_charge+0x13b/0x340 [ 1371.853116] __alloc_pages_nodemask+0x437/0x710 [ 1371.857800] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1371.862838] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1371.867428] ? trace_hardirqs_on+0x67/0x230 [ 1371.871754] ? kasan_check_read+0x11/0x20 [ 1371.875932] copy_process.part.0+0x3e0/0x79a0 [ 1371.880443] ? debug_smp_processor_id+0x1c/0x20 [ 1371.885148] ? perf_trace_lock+0xeb/0x510 [ 1371.889288] ? mark_held_locks+0x100/0x100 [ 1371.893524] ? zap_class+0x460/0x460 [ 1371.897240] ? debug_smp_processor_id+0x1c/0x20 [ 1371.901917] ? __might_fault+0x12b/0x1e0 [ 1371.905988] ? __cleanup_sighand+0x70/0x70 [ 1371.910238] ? lock_downgrade+0x810/0x810 [ 1371.914416] _do_fork+0x257/0xfe0 [ 1371.917880] ? fork_idle+0x1d0/0x1d0 [ 1371.921635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.926412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1371.931168] ? do_syscall_64+0x26/0x610 [ 1371.935150] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.940508] ? do_syscall_64+0x26/0x610 [ 1371.944482] __x64_sys_clone+0xbf/0x150 [ 1371.948450] do_syscall_64+0x103/0x610 [ 1371.952351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.957534] RIP: 0033:0x4563fa [ 1371.960717] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1371.979628] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1371.987350] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1371.994618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1372.001898] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1372.009169] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1372.016431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1372.025104] memory: usage 52660kB, limit 30720kB, failcnt 235 [ 1372.031065] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.037850] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.044182] Memory cgroup stats for /syz4: cache:132KB rss:39780KB rss_huge:34816KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39744KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1372.065020] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15407,uid=0 [ 1372.079816] Memory cgroup out of memory: Kill process 15407 (syz-executor.4) score 2152 or sacrifice child [ 1372.089805] Killed process 15407 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:35808kB, shmem-rss:0kB [ 1372.102459] oom_reaper: reaped process 15407 (syz-executor.4), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1372.123836] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1372.135062] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1372.142286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.151749] Call Trace: [ 1372.154363] dump_stack+0x172/0x1f0 [ 1372.158017] dump_header+0x10f/0xb6c [ 1372.161758] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1372.161788] ? ___ratelimit+0x60/0x595 [ 1372.161831] ? do_raw_spin_unlock+0x57/0x270 [ 1372.161853] oom_kill_process.cold+0x10/0x6f5 [ 1372.161874] ? task_will_free_mem+0x139/0x6e0 [ 1372.179737] ? debug_smp_processor_id+0x1c/0x20 [ 1372.179769] out_of_memory+0x79a/0x1280 [ 1372.192888] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.198033] ? oom_killer_disable+0x280/0x280 [ 1372.198050] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.198080] mem_cgroup_out_of_memory+0x99/0xe0 [ 1372.198114] ? memcg_memory_event+0x40/0x40 [ 1372.198138] ? _raw_spin_unlock+0x2d/0x50 [ 1372.216733] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.225965] try_charge+0xfec/0x1570 [ 1372.229684] ? find_held_lock+0x35/0x130 [ 1372.229713] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1372.229731] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1372.229746] ? find_held_lock+0x35/0x130 [ 1372.229763] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1372.229791] memcg_kmem_charge_memcg+0x7c/0x130 [ 1372.229806] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1372.229826] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1372.243566] memcg_kmem_charge+0x13b/0x340 [ 1372.243589] __alloc_pages_nodemask+0x437/0x710 [ 1372.243610] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1372.243632] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1372.243649] ? trace_hardirqs_on+0x67/0x230 [ 1372.243665] ? kasan_check_read+0x11/0x20 [ 1372.243691] copy_process.part.0+0x3e0/0x79a0 [ 1372.243714] ? debug_smp_processor_id+0x1c/0x20 [ 1372.257262] ? perf_trace_lock+0xeb/0x510 [ 1372.257278] ? mark_held_locks+0x100/0x100 [ 1372.257295] ? zap_class+0x460/0x460 [ 1372.257311] ? debug_smp_processor_id+0x1c/0x20 [ 1372.257330] ? __might_fault+0x12b/0x1e0 [ 1372.257356] ? __cleanup_sighand+0x70/0x70 [ 1372.280570] ? lock_downgrade+0x810/0x810 [ 1372.280606] _do_fork+0x257/0xfe0 [ 1372.280631] ? fork_idle+0x1d0/0x1d0 [ 1372.280660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1372.298180] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1372.298198] ? do_syscall_64+0x26/0x610 [ 1372.298215] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.298228] ? do_syscall_64+0x26/0x610 [ 1372.298251] __x64_sys_clone+0xbf/0x150 [ 1372.298272] do_syscall_64+0x103/0x610 [ 1372.298290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.311345] RIP: 0033:0x4563fa [ 1372.311363] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1372.311371] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1372.311386] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1372.311396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1372.311406] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1372.311415] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1372.311424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1372.318649] memory: usage 50368kB, limit 30720kB, failcnt 277 [ 1372.328242] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.328252] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.328260] Memory cgroup stats for /syz4: cache:132KB rss:37620KB rss_huge:32768KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:37584KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1372.336059] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=/group.stat,pid=14741,uid=0 [ 1372.336132] Memory cgroup out of memory: Kill process 14741 (/group.stat) score 2152 or sacrifice child [ 1372.336208] Killed process 14741 (/group.stat) total-vm:72580kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB [ 1372.538610] binder: undelivered TRANSACTION_ERROR: 29189 [ 1372.539985] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1372.555617] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1372.562817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.572165] Call Trace: [ 1372.574793] dump_stack+0x172/0x1f0 [ 1372.578415] dump_header+0x10f/0xb6c [ 1372.582126] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1372.587418] ? ___ratelimit+0x60/0x595 [ 1372.591296] ? do_raw_spin_unlock+0x57/0x270 [ 1372.595708] oom_kill_process.cold+0x10/0x6f5 [ 1372.600195] ? task_will_free_mem+0x139/0x6e0 [ 1372.604679] ? debug_smp_processor_id+0x1c/0x20 [ 1372.609343] out_of_memory+0x79a/0x1280 [ 1372.613310] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.618402] ? oom_killer_disable+0x280/0x280 [ 1372.622886] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.627998] mem_cgroup_out_of_memory+0x99/0xe0 [ 1372.632667] ? memcg_memory_event+0x40/0x40 [ 1372.636986] ? _raw_spin_unlock+0x2d/0x50 [ 1372.641125] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1372.646222] try_charge+0xfec/0x1570 [ 1372.649937] ? find_held_lock+0x35/0x130 [ 1372.653993] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1372.658824] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1372.663657] ? find_held_lock+0x35/0x130 [ 1372.667706] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1372.672543] memcg_kmem_charge_memcg+0x7c/0x130 [ 1372.677197] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1372.681684] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1372.686532] memcg_kmem_charge+0x13b/0x340 [ 1372.690769] __alloc_pages_nodemask+0x437/0x710 [ 1372.695463] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1372.700477] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1372.705053] ? trace_hardirqs_on+0x67/0x230 [ 1372.709365] ? kasan_check_read+0x11/0x20 [ 1372.713511] copy_process.part.0+0x3e0/0x79a0 [ 1372.717996] ? debug_smp_processor_id+0x1c/0x20 [ 1372.722668] ? perf_trace_lock+0xeb/0x510 [ 1372.726800] ? mark_held_locks+0x100/0x100 [ 1372.731041] ? zap_class+0x460/0x460 [ 1372.734747] ? debug_smp_processor_id+0x1c/0x20 [ 1372.739403] ? __might_fault+0x12b/0x1e0 [ 1372.743464] ? __cleanup_sighand+0x70/0x70 [ 1372.747689] ? lock_downgrade+0x810/0x810 [ 1372.751853] _do_fork+0x257/0xfe0 [ 1372.755295] ? fork_idle+0x1d0/0x1d0 [ 1372.759004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1372.763748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1372.768488] ? do_syscall_64+0x26/0x610 [ 1372.772460] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.777813] ? do_syscall_64+0x26/0x610 [ 1372.781784] __x64_sys_clone+0xbf/0x150 [ 1372.785751] do_syscall_64+0x103/0x610 [ 1372.789637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.794819] RIP: 0033:0x4563fa [ 1372.797999] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1372.816891] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1372.824589] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1372.831848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1372.839112] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1372.846369] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1372.853623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1372.871333] memory: usage 48000kB, limit 30720kB, failcnt 283 [ 1372.877344] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.897077] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1372.907247] Memory cgroup stats for /syz4: cache:132KB rss:35456KB rss_huge:30720KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:35412KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1372.937015] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11749,uid=0 [ 1372.960226] Memory cgroup out of memory: Kill process 11749 (syz-executor.4) score 2152 or sacrifice child [ 1372.970364] Killed process 11749 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB [ 1373.019010] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1373.038969] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1373.046171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.055525] Call Trace: [ 1373.058146] dump_stack+0x172/0x1f0 [ 1373.061794] dump_header+0x10f/0xb6c [ 1373.065521] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1373.070631] ? ___ratelimit+0x60/0x595 [ 1373.074535] ? do_raw_spin_unlock+0x57/0x270 [ 1373.078977] oom_kill_process.cold+0x10/0x6f5 [ 1373.083491] ? task_will_free_mem+0x139/0x6e0 [ 1373.088000] ? debug_smp_processor_id+0x1c/0x20 [ 1373.092691] out_of_memory+0x79a/0x1280 [ 1373.096687] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.101832] ? oom_killer_disable+0x280/0x280 [ 1373.106343] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.111468] mem_cgroup_out_of_memory+0x99/0xe0 [ 1373.116149] ? memcg_memory_event+0x40/0x40 [ 1373.120492] ? _raw_spin_unlock+0x2d/0x50 [ 1373.124648] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.129772] try_charge+0xfec/0x1570 [ 1373.133491] ? find_held_lock+0x35/0x130 [ 1373.137570] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1373.142424] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1373.147287] ? find_held_lock+0x35/0x130 [ 1373.151372] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1373.156323] memcg_kmem_charge_memcg+0x7c/0x130 [ 1373.161003] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1373.165518] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1373.170378] memcg_kmem_charge+0x13b/0x340 [ 1373.174660] __alloc_pages_nodemask+0x437/0x710 [ 1373.179344] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1373.184388] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1373.188993] ? trace_hardirqs_on+0x67/0x230 [ 1373.193323] ? kasan_check_read+0x11/0x20 [ 1373.197535] copy_process.part.0+0x3e0/0x79a0 [ 1373.202062] ? debug_smp_processor_id+0x1c/0x20 [ 1373.206750] ? perf_trace_lock+0xeb/0x510 [ 1373.210906] ? mark_held_locks+0x100/0x100 [ 1373.215151] ? zap_class+0x460/0x460 [ 1373.218874] ? debug_smp_processor_id+0x1c/0x20 [ 1373.223556] ? __might_fault+0x12b/0x1e0 [ 1373.227654] ? __cleanup_sighand+0x70/0x70 [ 1373.231914] ? lock_downgrade+0x810/0x810 [ 1373.236113] _do_fork+0x257/0xfe0 [ 1373.239584] ? fork_idle+0x1d0/0x1d0 [ 1373.243325] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1373.248104] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1373.252881] ? do_syscall_64+0x26/0x610 [ 1373.256870] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.262244] ? do_syscall_64+0x26/0x610 [ 1373.266235] __x64_sys_clone+0xbf/0x150 [ 1373.270226] do_syscall_64+0x103/0x610 [ 1373.274147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.279347] RIP: 0033:0x4563fa [ 1373.282543] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1373.301460] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1373.309185] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1373.316465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1373.323742] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1373.331016] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1373.338291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1373.359878] memory: usage 45676kB, limit 30720kB, failcnt 289 [ 1373.368699] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1373.384672] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1373.396393] Memory cgroup stats for /syz4: cache:132KB rss:33296KB rss_huge:28672KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:33252KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1373.426801] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15894,uid=0 [ 1373.450859] Memory cgroup out of memory: Kill process 15894 (syz-executor.4) score 2121 or sacrifice child [ 1373.460929] Killed process 15894 (syz-executor.4) total-vm:72844kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 1373.493067] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1373.504446] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1373.511653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.521013] Call Trace: [ 1373.523626] dump_stack+0x172/0x1f0 [ 1373.527248] dump_header+0x10f/0xb6c [ 1373.530954] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1373.536051] ? ___ratelimit+0x60/0x595 [ 1373.539951] ? do_raw_spin_unlock+0x57/0x270 [ 1373.544358] oom_kill_process.cold+0x10/0x6f5 [ 1373.548845] ? task_will_free_mem+0x139/0x6e0 [ 1373.553348] ? debug_smp_processor_id+0x1c/0x20 [ 1373.558016] out_of_memory+0x79a/0x1280 [ 1373.561985] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.567118] ? oom_killer_disable+0x280/0x280 [ 1373.571617] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.576723] mem_cgroup_out_of_memory+0x99/0xe0 [ 1373.581405] ? memcg_memory_event+0x40/0x40 [ 1373.585754] ? _raw_spin_unlock+0x2d/0x50 [ 1373.589907] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.594998] try_charge+0xfec/0x1570 [ 1373.598721] ? find_held_lock+0x35/0x130 [ 1373.602777] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1373.607612] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1373.612445] ? find_held_lock+0x35/0x130 [ 1373.616495] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1373.621334] memcg_kmem_charge_memcg+0x7c/0x130 [ 1373.625990] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1373.630481] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1373.635317] memcg_kmem_charge+0x13b/0x340 [ 1373.639546] __alloc_pages_nodemask+0x437/0x710 [ 1373.644211] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1373.649225] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1373.653797] ? trace_hardirqs_on+0x67/0x230 [ 1373.658118] ? kasan_check_read+0x11/0x20 [ 1373.662263] copy_process.part.0+0x3e0/0x79a0 [ 1373.666754] ? debug_smp_processor_id+0x1c/0x20 [ 1373.671412] ? perf_trace_lock+0xeb/0x510 [ 1373.675545] ? mark_held_locks+0x100/0x100 [ 1373.679768] ? zap_class+0x460/0x460 [ 1373.683473] ? debug_smp_processor_id+0x1c/0x20 [ 1373.688137] ? __might_fault+0x12b/0x1e0 [ 1373.692202] ? __cleanup_sighand+0x70/0x70 [ 1373.696428] ? lock_downgrade+0x810/0x810 [ 1373.700577] _do_fork+0x257/0xfe0 [ 1373.704030] ? fork_idle+0x1d0/0x1d0 [ 1373.707742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1373.712505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1373.717554] ? do_syscall_64+0x26/0x610 [ 1373.721518] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.726869] ? do_syscall_64+0x26/0x610 [ 1373.730838] __x64_sys_clone+0xbf/0x150 [ 1373.734802] do_syscall_64+0x103/0x610 [ 1373.738693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.743867] RIP: 0033:0x4563fa [ 1373.747047] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1373.765937] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1373.773651] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1373.780908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1373.788171] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1373.795428] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1373.802684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1373.810313] memory: usage 43364kB, limit 30720kB, failcnt 295 [ 1373.816625] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1373.823634] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1373.829850] Memory cgroup stats for /syz4: cache:132KB rss:31148KB rss_huge:26624KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:31096KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1373.850878] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15873,uid=0 [ 1373.865667] Memory cgroup out of memory: Kill process 15873 (syz-executor.4) score 2120 or sacrifice child [ 1373.875708] Killed process 15873 (syz-executor.4) total-vm:72712kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 1373.888585] oom_reaper: reaped process 15873 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1373.906293] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1373.917782] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1373.924982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.934332] Call Trace: [ 1373.936915] dump_stack+0x172/0x1f0 [ 1373.940553] dump_header+0x10f/0xb6c [ 1373.944262] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1373.949353] ? ___ratelimit+0x60/0x595 [ 1373.953229] ? do_raw_spin_unlock+0x57/0x270 [ 1373.957632] oom_kill_process.cold+0x10/0x6f5 [ 1373.962127] ? task_will_free_mem+0x139/0x6e0 [ 1373.966637] ? debug_smp_processor_id+0x1c/0x20 [ 1373.971314] out_of_memory+0x79a/0x1280 [ 1373.975293] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.980384] ? oom_killer_disable+0x280/0x280 [ 1373.984878] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1373.989975] mem_cgroup_out_of_memory+0x99/0xe0 [ 1373.994634] ? memcg_memory_event+0x40/0x40 [ 1373.998959] ? _raw_spin_unlock+0x2d/0x50 [ 1374.003132] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.008246] try_charge+0xfec/0x1570 [ 1374.011961] ? find_held_lock+0x35/0x130 [ 1374.016019] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1374.020869] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.025699] ? find_held_lock+0x35/0x130 [ 1374.029748] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.034588] memcg_kmem_charge_memcg+0x7c/0x130 [ 1374.039246] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1374.043732] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1374.048580] memcg_kmem_charge+0x13b/0x340 [ 1374.052814] __alloc_pages_nodemask+0x437/0x710 [ 1374.057493] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1374.062502] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1374.067071] ? trace_hardirqs_on+0x67/0x230 [ 1374.071390] ? kasan_check_read+0x11/0x20 [ 1374.075544] copy_process.part.0+0x3e0/0x79a0 [ 1374.080029] ? debug_smp_processor_id+0x1c/0x20 [ 1374.084701] ? perf_trace_lock+0xeb/0x510 [ 1374.088841] ? mark_held_locks+0x100/0x100 [ 1374.093073] ? zap_class+0x460/0x460 [ 1374.096783] ? debug_smp_processor_id+0x1c/0x20 [ 1374.101441] ? __might_fault+0x12b/0x1e0 [ 1374.105494] ? __cleanup_sighand+0x70/0x70 [ 1374.109720] ? lock_downgrade+0x810/0x810 [ 1374.113869] _do_fork+0x257/0xfe0 [ 1374.117335] ? fork_idle+0x1d0/0x1d0 [ 1374.121046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.125791] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.130534] ? do_syscall_64+0x26/0x610 [ 1374.134497] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.139860] ? do_syscall_64+0x26/0x610 [ 1374.143827] __x64_sys_clone+0xbf/0x150 [ 1374.147794] do_syscall_64+0x103/0x610 [ 1374.151676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.156859] RIP: 0033:0x4563fa [ 1374.160043] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1374.178962] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1374.186658] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1374.193918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1374.201174] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1374.208515] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1374.215776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1374.223551] memory: usage 41028kB, limit 30720kB, failcnt 307 [ 1374.229561] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1374.236524] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1374.242896] Memory cgroup stats for /syz4: cache:132KB rss:28968KB rss_huge:24576KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28916KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1374.263932] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14033,uid=0 [ 1374.278755] Memory cgroup out of memory: Kill process 14033 (syz-executor.4) score 2120 or sacrifice child [ 1374.288807] Killed process 14033 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 1374.302868] oom_reaper: reaped process 14033 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1374.327804] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1374.339147] CPU: 1 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1374.346343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.355696] Call Trace: [ 1374.358288] dump_stack+0x172/0x1f0 [ 1374.361910] dump_header+0x10f/0xb6c [ 1374.365632] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1374.370724] ? ___ratelimit+0x60/0x595 [ 1374.374628] ? do_raw_spin_unlock+0x57/0x270 [ 1374.379030] oom_kill_process.cold+0x10/0x6f5 [ 1374.383515] ? task_will_free_mem+0x139/0x6e0 [ 1374.388009] ? debug_smp_processor_id+0x1c/0x20 [ 1374.392668] out_of_memory+0x79a/0x1280 [ 1374.396635] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.401726] ? oom_killer_disable+0x280/0x280 [ 1374.406210] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.411311] mem_cgroup_out_of_memory+0x99/0xe0 [ 1374.415967] ? memcg_memory_event+0x40/0x40 [ 1374.420280] ? _raw_spin_unlock+0x2d/0x50 [ 1374.424432] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.429526] try_charge+0xfec/0x1570 [ 1374.433244] ? find_held_lock+0x35/0x130 [ 1374.437298] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1374.442137] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.446976] ? find_held_lock+0x35/0x130 [ 1374.451031] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.455894] memcg_kmem_charge_memcg+0x7c/0x130 [ 1374.460551] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1374.465049] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1374.469890] memcg_kmem_charge+0x13b/0x340 [ 1374.474131] __alloc_pages_nodemask+0x437/0x710 [ 1374.478796] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1374.483805] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1374.488381] ? trace_hardirqs_on+0x67/0x230 [ 1374.492693] ? kasan_check_read+0x11/0x20 [ 1374.496832] copy_process.part.0+0x3e0/0x79a0 [ 1374.501316] ? debug_smp_processor_id+0x1c/0x20 [ 1374.505973] ? perf_trace_lock+0xeb/0x510 [ 1374.510123] ? mark_held_locks+0x100/0x100 [ 1374.514348] ? zap_class+0x460/0x460 [ 1374.518047] ? debug_smp_processor_id+0x1c/0x20 [ 1374.522712] ? __might_fault+0x12b/0x1e0 [ 1374.526769] ? __cleanup_sighand+0x70/0x70 [ 1374.530998] ? lock_downgrade+0x810/0x810 [ 1374.535143] _do_fork+0x257/0xfe0 [ 1374.538594] ? fork_idle+0x1d0/0x1d0 [ 1374.542308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.547051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.551811] ? do_syscall_64+0x26/0x610 [ 1374.555790] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.561142] ? do_syscall_64+0x26/0x610 [ 1374.565115] __x64_sys_clone+0xbf/0x150 [ 1374.569096] do_syscall_64+0x103/0x610 [ 1374.572981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.578153] RIP: 0033:0x4563fa [ 1374.581334] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1374.600471] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1374.608273] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1374.615530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1374.622789] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1374.630045] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1374.637477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1374.647464] memory: usage 38580kB, limit 30720kB, failcnt 361 [ 1374.653513] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1374.660308] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1374.666676] Memory cgroup stats for /syz4: cache:132KB rss:26828KB rss_huge:24576KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26776KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1374.687822] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15992,uid=0 [ 1374.715653] Memory cgroup out of memory: Kill process 15992 (syz-executor.4) score 2120 or sacrifice child [ 1374.730357] Killed process 15992 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 1374.753406] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1374.764717] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1374.771918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.781289] Call Trace: [ 1374.783911] dump_stack+0x172/0x1f0 [ 1374.787550] dump_header+0x10f/0xb6c [ 1374.791270] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1374.796394] ? ___ratelimit+0x60/0x595 [ 1374.800277] ? do_raw_spin_unlock+0x57/0x270 [ 1374.804683] oom_kill_process.cold+0x10/0x6f5 [ 1374.809175] ? task_will_free_mem+0x139/0x6e0 [ 1374.813674] ? debug_smp_processor_id+0x1c/0x20 [ 1374.818468] out_of_memory+0x79a/0x1280 [ 1374.822447] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.827546] ? oom_killer_disable+0x280/0x280 [ 1374.832032] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.837167] mem_cgroup_out_of_memory+0x99/0xe0 [ 1374.841846] ? memcg_memory_event+0x40/0x40 [ 1374.846169] ? _raw_spin_unlock+0x2d/0x50 [ 1374.850316] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1374.855412] try_charge+0xfec/0x1570 [ 1374.859142] ? find_held_lock+0x35/0x130 [ 1374.863213] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1374.868056] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.872888] ? find_held_lock+0x35/0x130 [ 1374.876958] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1374.881800] memcg_kmem_charge_memcg+0x7c/0x130 [ 1374.886454] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1374.890942] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1374.895781] memcg_kmem_charge+0x13b/0x340 [ 1374.900007] __alloc_pages_nodemask+0x437/0x710 [ 1374.904665] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1374.909680] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1374.914252] ? trace_hardirqs_on+0x67/0x230 [ 1374.918588] ? kasan_check_read+0x11/0x20 [ 1374.922732] copy_process.part.0+0x3e0/0x79a0 [ 1374.927238] ? debug_smp_processor_id+0x1c/0x20 [ 1374.931911] ? perf_trace_lock+0xeb/0x510 [ 1374.936050] ? mark_held_locks+0x100/0x100 [ 1374.940274] ? zap_class+0x460/0x460 [ 1374.943987] ? debug_smp_processor_id+0x1c/0x20 [ 1374.948658] ? __might_fault+0x12b/0x1e0 [ 1374.952722] ? __cleanup_sighand+0x70/0x70 [ 1374.956978] ? lock_downgrade+0x810/0x810 [ 1374.961138] _do_fork+0x257/0xfe0 [ 1374.964584] ? fork_idle+0x1d0/0x1d0 [ 1374.968306] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.973074] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1374.977848] ? do_syscall_64+0x26/0x610 [ 1374.981817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.987169] ? do_syscall_64+0x26/0x610 [ 1374.991160] __x64_sys_clone+0xbf/0x150 [ 1374.995143] do_syscall_64+0x103/0x610 [ 1374.999039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.004212] RIP: 0033:0x4563fa [ 1375.007392] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1375.026311] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1375.034020] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1375.041291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1375.048561] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1375.055826] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1375.063117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1375.072017] memory: usage 36244kB, limit 30720kB, failcnt 367 [ 1375.077923] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.084759] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.090973] Memory cgroup stats for /syz4: cache:132KB rss:24640KB rss_huge:22528KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:24596KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1375.111746] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12166,uid=0 [ 1375.126431] Memory cgroup out of memory: Kill process 12166 (syz-executor.4) score 2120 or sacrifice child [ 1375.136401] Killed process 12166 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1375.149033] oom_reaper: reaped process 12166 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1375.163277] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1375.174543] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1375.181753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.191139] Call Trace: [ 1375.193729] dump_stack+0x172/0x1f0 [ 1375.197358] dump_header+0x10f/0xb6c [ 1375.201068] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1375.206198] ? ___ratelimit+0x60/0x595 [ 1375.210096] ? do_raw_spin_unlock+0x57/0x270 [ 1375.214505] oom_kill_process.cold+0x10/0x6f5 [ 1375.219016] ? task_will_free_mem+0x139/0x6e0 [ 1375.223511] ? debug_smp_processor_id+0x1c/0x20 [ 1375.228200] out_of_memory+0x79a/0x1280 [ 1375.232173] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.237271] ? oom_killer_disable+0x280/0x280 [ 1375.241752] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.246852] mem_cgroup_out_of_memory+0x99/0xe0 [ 1375.251506] ? memcg_memory_event+0x40/0x40 [ 1375.255825] ? _raw_spin_unlock+0x2d/0x50 [ 1375.259966] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.265074] try_charge+0xfec/0x1570 [ 1375.268796] ? find_held_lock+0x35/0x130 [ 1375.272890] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1375.277735] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1375.282575] ? find_held_lock+0x35/0x130 [ 1375.286630] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1375.291482] memcg_kmem_charge_memcg+0x7c/0x130 [ 1375.296179] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1375.300682] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1375.305517] memcg_kmem_charge+0x13b/0x340 [ 1375.309743] __alloc_pages_nodemask+0x437/0x710 [ 1375.314403] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1375.319415] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1375.324006] ? trace_hardirqs_on+0x67/0x230 [ 1375.328332] ? kasan_check_read+0x11/0x20 [ 1375.332494] copy_process.part.0+0x3e0/0x79a0 [ 1375.336999] ? debug_smp_processor_id+0x1c/0x20 [ 1375.341659] ? perf_trace_lock+0xeb/0x510 [ 1375.345811] ? mark_held_locks+0x100/0x100 [ 1375.350034] ? zap_class+0x460/0x460 [ 1375.353743] ? debug_smp_processor_id+0x1c/0x20 [ 1375.358430] ? __might_fault+0x12b/0x1e0 [ 1375.362487] ? __cleanup_sighand+0x70/0x70 [ 1375.366711] ? lock_downgrade+0x810/0x810 [ 1375.370858] _do_fork+0x257/0xfe0 [ 1375.374304] ? fork_idle+0x1d0/0x1d0 [ 1375.378028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1375.382774] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1375.387518] ? do_syscall_64+0x26/0x610 [ 1375.391477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.396828] ? do_syscall_64+0x26/0x610 [ 1375.400799] __x64_sys_clone+0xbf/0x150 [ 1375.404770] do_syscall_64+0x103/0x610 [ 1375.408648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.415913] RIP: 0033:0x4563fa [ 1375.419110] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1375.438010] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1375.445715] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1375.452989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1375.460248] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1375.467502] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1375.474754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1375.483617] memory: usage 33932kB, limit 30720kB, failcnt 373 [ 1375.489513] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.496377] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.502557] Memory cgroup stats for /syz4: cache:132KB rss:22484KB rss_huge:20480KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:22440KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1375.523309] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12224,uid=0 [ 1375.538005] Memory cgroup out of memory: Kill process 12224 (syz-executor.4) score 2120 or sacrifice child [ 1375.547942] Killed process 12224 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1375.560362] oom_reaper: reaped process 12224 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1375.571966] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1375.583250] CPU: 0 PID: 4228 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1375.590474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.599839] Call Trace: [ 1375.602435] dump_stack+0x172/0x1f0 [ 1375.606058] dump_header+0x10f/0xb6c [ 1375.609760] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1375.614851] ? ___ratelimit+0x60/0x595 [ 1375.618729] ? do_raw_spin_unlock+0x57/0x270 [ 1375.623137] oom_kill_process.cold+0x10/0x6f5 [ 1375.627625] ? task_will_free_mem+0x139/0x6e0 [ 1375.632118] ? debug_smp_processor_id+0x1c/0x20 [ 1375.636777] out_of_memory+0x79a/0x1280 [ 1375.640768] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.645868] ? oom_killer_disable+0x280/0x280 [ 1375.650349] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.655450] mem_cgroup_out_of_memory+0x99/0xe0 [ 1375.660119] ? memcg_memory_event+0x40/0x40 [ 1375.664439] ? _raw_spin_unlock+0x2d/0x50 [ 1375.668571] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1375.673660] try_charge+0xfec/0x1570 [ 1375.677366] ? find_held_lock+0x35/0x130 [ 1375.681423] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1375.686264] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1375.691164] ? find_held_lock+0x35/0x130 [ 1375.695270] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1375.700129] memcg_kmem_charge_memcg+0x7c/0x130 [ 1375.704794] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1375.709283] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1375.714139] memcg_kmem_charge+0x13b/0x340 [ 1375.718616] __alloc_pages_nodemask+0x437/0x710 [ 1375.723306] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1375.728348] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1375.732942] ? trace_hardirqs_on+0x67/0x230 [ 1375.737253] ? kasan_check_read+0x11/0x20 [ 1375.741398] copy_process.part.0+0x3e0/0x79a0 [ 1375.745888] ? debug_smp_processor_id+0x1c/0x20 [ 1375.750573] ? perf_trace_lock+0xeb/0x510 [ 1375.754712] ? mark_held_locks+0x100/0x100 [ 1375.758938] ? zap_class+0x460/0x460 [ 1375.762638] ? debug_smp_processor_id+0x1c/0x20 [ 1375.767296] ? __might_fault+0x12b/0x1e0 [ 1375.771353] ? __cleanup_sighand+0x70/0x70 [ 1375.775593] ? lock_downgrade+0x810/0x810 [ 1375.779739] _do_fork+0x257/0xfe0 [ 1375.783183] ? fork_idle+0x1d0/0x1d0 [ 1375.786894] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1375.791638] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1375.796391] ? do_syscall_64+0x26/0x610 [ 1375.800352] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.805703] ? do_syscall_64+0x26/0x610 [ 1375.809665] __x64_sys_clone+0xbf/0x150 [ 1375.813628] do_syscall_64+0x103/0x610 [ 1375.817541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.822725] RIP: 0033:0x4563fa [ 1375.825910] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1375.844795] RSP: 002b:00007ffddd7117c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1375.852513] RAX: ffffffffffffffda RBX: 00007ffddd7117c0 RCX: 00000000004563fa [ 1375.859777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1375.867034] RBP: 00007ffddd711800 R08: 0000000000000001 R09: 000000000114c940 [ 1375.874289] R10: 000000000114cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1375.881542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 1375.890369] memory: usage 31616kB, limit 30720kB, failcnt 397 [ 1375.896343] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.903201] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1375.909349] Memory cgroup stats for /syz4: cache:132KB rss:20316KB rss_huge:18432KB shmem:88KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:20280KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1375.930126] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12271,uid=0 [ 1375.944774] Memory cgroup out of memory: Kill process 12271 (syz-executor.4) score 2120 or sacrifice child 19:35:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 19:35:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 19:35:51 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa42478c4, 0x102005, 0x0, 0xfffffffffffffdad) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0xfffffffffffffeff) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3c", 0xac, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 1375.954710] Killed process 12271 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1375.967154] oom_reaper: reaped process 12271 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 19:35:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 19:35:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 19:35:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1376.106125] syz-executor.2 (20454): attempted to duplicate a private mapping with mremap. This is not supported. 19:35:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 19:35:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') fstat(r0, &(0x7f0000004240)) [ 1376.267910] IPVS: ftp: loaded support on port[0] = 21 [ 1376.368805] IPVS: ftp: loaded support on port[0] = 21 [ 1376.382175] IPVS: ftp: loaded support on port[0] = 21 19:35:51 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0xfea1}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 19:35:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) 19:35:52 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa42478c4, 0x102005, 0x0, 0xfffffffffffffdad) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0xfffffffffffffeff) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3c", 0xac, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 19:35:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 19:35:52 executing program 4: r0 = creat(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x800010b, 0x18) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) [ 1377.629797] IPVS: ftp: loaded support on port[0] = 21 19:35:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8931, &(0x7f0000000040)={'veth1_to_bond:\x00', 0x0}) close(r2) close(r1) 19:35:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000200), 0x4) 19:35:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 19:35:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000004"]}) close(r2) close(r1) 19:35:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="07484fb97c5b5c10a3a5947830aa9ed636f07d3f5ee71d2520b0f6af6fece10a539ac09b49783b3407c08fe98225bdbb177f1f2ee7b2ad2203d9fa8c759cbb2cf62690ee61377692a33c114095e608322acfed2c57c4af7c44dd437fae990842b68ff727447eeec08e6f122ecead48cac22448adbd9796ade86bc359113aa2e5f044b33bf3c928ef9bc48de0112e5604272f240dfa89c7e25f045656f5cfb8d2ce98b05c9b905b238c64635d22989e5047bbbaa37cc7a97ae56f96d872141dfad248c01a16ac5957ca129d0365b807206970ec", 0xd3}], 0x1, &(0x7f00000002c0), 0x0, 0x20000000}, 0x4004004) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000800)={0x3, 0x3f, 0xcc, 0x5, 0x6}) unshare(0x44000000) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200ff4b54e3140008000100767469000c00020008000400e0812bc80000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 19:35:56 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa42478c4, 0x102005, 0x0, 0xfffffffffffffdad) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0xfffffffffffffeff) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3c", 0xac, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 19:35:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x3, r1, 0x0, 0x0) 19:35:56 executing program 0: r0 = socket$inet(0x10, 0x10000000003, 0x9) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "763759aef876e0a277821709"}, 0x10) 19:35:56 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) [ 1381.388294] IPVS: ftp: loaded support on port[0] = 21 19:35:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x74, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x2) writev(r1, &(0x7f0000001a40)=[{&(0x7f0000000a00)="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", 0x209}], 0x1) 19:35:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x4400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') add_key$user(0x0, 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) gettid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x207e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) [ 1381.648977] binder_alloc: binder_alloc_mmap_handler: 20527 20ffc000-20ffd000 already mapped failed -16 [ 1381.734886] binder_alloc: binder_alloc_mmap_handler: 20527 20001000-20004000 already mapped failed -16 19:35:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x4400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') add_key$user(0x0, 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) gettid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x207e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) 19:35:57 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) [ 1381.886760] IPVS: ftp: loaded support on port[0] = 21 [ 1382.055085] binder_alloc: binder_alloc_mmap_handler: 20548 20ffc000-20ffd000 already mapped failed -16 19:35:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x4400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') add_key$user(0x0, 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) gettid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x207e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) 19:36:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200001) 19:36:00 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) [ 1385.733524] binder_alloc: binder_alloc_mmap_handler: 20560 20ffc000-20ffd000 already mapped failed -16 19:36:01 executing program 2: r0 = socket(0x10, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x4400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') add_key$user(0x0, 0x0, &(0x7f00000006c0), 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) gettid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x207e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) 19:36:01 executing program 3: modify_ldt$read_default(0x2, 0xffffffffffffffff, 0xffffffc9) 19:36:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009d40)='./file0/file0\x00', 0x0, 0x0) 19:36:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200001) 19:36:01 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 19:36:01 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), 0x4) accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000340)=0xffffffffffffff44) exit(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x22000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x7530}, 0x16, 0xab2}, 0x18) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, &(0x7f0000000280)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x2, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000003080)=""/4096, 0x40f00, 0xfffffffffffffffc}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0xd01fdefdd1890d79, 0x0) 19:36:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x1, 0x4) bind$inet(r1, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) [ 1386.242680] binder_alloc: binder_alloc_mmap_handler: 20569 20ffc000-20ffd000 already mapped failed -16 19:36:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200001) 19:36:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009d40)='./file0/file0\x00', 0x0, 0x0) 19:36:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x7b9, 0x0) 19:36:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) 19:36:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200001) 19:36:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x26d, 0xffffffffffffffff, 0x0, 0xf06d0f5bc02c0ba7) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x8, "f982cca3f6b67f6d5d9867a558126a5c0cd3e797aec28508c2f871a69e2a57ed", 0x200, 0x0, 0xfff}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) 19:36:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x268, 0x0, 0x0, 0x0}, 0x18) 19:36:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009d40)='./file0/file0\x00', 0x0, 0x0) 19:36:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c2d3f3188a070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 19:36:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, r2}}, 0x48) [ 1386.926996] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1386.960592] CPU: 0 PID: 20617 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1386.967915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.977285] Call Trace: [ 1386.979890] dump_stack+0x172/0x1f0 [ 1386.983546] dump_header+0x10f/0xb6c [ 1386.987277] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1386.992399] ? ___ratelimit+0x60/0x595 [ 1386.996302] ? do_raw_spin_unlock+0x57/0x270 [ 1387.000730] oom_kill_process.cold+0x10/0x6f5 [ 1387.005247] ? task_will_free_mem+0x139/0x6e0 [ 1387.009757] ? debug_smp_processor_id+0x1c/0x20 [ 1387.014454] out_of_memory+0x79a/0x1280 [ 1387.018450] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1387.023572] ? oom_killer_disable+0x280/0x280 [ 1387.028082] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1387.033227] mem_cgroup_out_of_memory+0x99/0xe0 [ 1387.037910] ? memcg_memory_event+0x40/0x40 [ 1387.042255] ? _raw_spin_unlock+0x2d/0x50 [ 1387.046415] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1387.051526] try_charge+0xfec/0x1570 [ 1387.055245] ? find_held_lock+0x35/0x130 [ 1387.059324] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1387.064185] ? kasan_check_read+0x11/0x20 [ 1387.068353] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1387.073210] mem_cgroup_try_charge+0x24d/0x5e0 [ 1387.077810] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1387.082756] shmem_getpage_gfp+0x69b/0x3520 [ 1387.087141] ? shmem_add_to_page_cache+0x1200/0x1200 [ 1387.092260] ? debug_smp_processor_id+0x1c/0x20 [ 1387.096936] ? lock_downgrade+0x810/0x810 [ 1387.101120] shmem_fault+0x22d/0x760 [ 1387.104850] ? __handle_mm_fault+0x349d/0x3f20 [ 1387.109450] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 1387.114748] ? lock_downgrade+0x810/0x810 [ 1387.118916] __do_fault+0x116/0x4e0 [ 1387.122559] __handle_mm_fault+0x2cbd/0x3f20 [ 1387.126986] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1387.131836] ? find_held_lock+0x35/0x130 [ 1387.135908] ? handle_mm_fault+0x322/0xb30 [ 1387.140170] ? kasan_check_read+0x11/0x20 [ 1387.144330] handle_mm_fault+0x43f/0xb30 [ 1387.148410] __get_user_pages+0x7b6/0x1a40 [ 1387.152669] ? follow_page_mask+0x19a0/0x19a0 [ 1387.157188] ? memset+0x32/0x40 [ 1387.160482] populate_vma_page_range+0x20d/0x2a0 [ 1387.165254] __mm_populate+0x204/0x380 [ 1387.169158] ? populate_vma_page_range+0x2a0/0x2a0 [ 1387.174128] vm_mmap_pgoff+0x213/0x230 [ 1387.178044] ? vma_is_stack_for_current+0xd0/0xd0 [ 1387.182895] ? kasan_check_read+0x11/0x20 [ 1387.187063] ? _copy_to_user+0xc9/0x120 [ 1387.191061] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1387.196661] ksys_mmap_pgoff+0xf7/0x630 [ 1387.200665] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1387.205601] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1387.210366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1387.215142] ? do_syscall_64+0x26/0x610 [ 1387.219137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.224516] __x64_sys_mmap+0xe9/0x1b0 [ 1387.228429] do_syscall_64+0x103/0x610 [ 1387.232335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.237529] RIP: 0033:0x457e29 [ 1387.240731] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1387.259636] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1387.267398] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 1387.274670] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 1387.281942] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1387.289215] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1387.296494] R13: 00000000004c3b88 R14: 00000000004d6ca0 R15: 00000000ffffffff 19:36:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:02 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), 0x4) accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000340)=0xffffffffffffff44) exit(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x22000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x7530}, 0x16, 0xab2}, 0x18) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, &(0x7f0000000280)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x2, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000003080)=""/4096, 0x40f00, 0xfffffffffffffffc}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0xd01fdefdd1890d79, 0x0) 19:36:02 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009d40)='./file0/file0\x00', 0x0, 0x0) 19:36:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x26d, 0xffffffffffffffff, 0x0, 0xf06d0f5bc02c0ba7) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x8, "f982cca3f6b67f6d5d9867a558126a5c0cd3e797aec28508c2f871a69e2a57ed", 0x200, 0x0, 0xfff}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) [ 1387.433881] memory: usage 30652kB, limit 30720kB, failcnt 444 [ 1387.443916] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1387.465647] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 19:36:02 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) close(r0) [ 1387.485048] Memory cgroup stats for /syz4: cache:1188KB rss:18236KB rss_huge:16384KB shmem:1276KB mapped_file:1188KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1320KB active_anon:18204KB inactive_file:0KB active_file:4KB unevictable:0KB 19:36:02 executing program 5: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) [ 1387.664432] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14023,uid=0 [ 1387.701655] Memory cgroup out of memory: Kill process 14023 (syz-executor.4) score 2120 or sacrifice child [ 1387.791055] Killed process 14023 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB 19:36:03 executing program 5: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:03 executing program 3: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x26d, 0xffffffffffffffff, 0x0, 0xf06d0f5bc02c0ba7) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x8, "f982cca3f6b67f6d5d9867a558126a5c0cd3e797aec28508c2f871a69e2a57ed", 0x200, 0x0, 0xfff}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) [ 1388.126814] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1388.193217] CPU: 1 PID: 20617 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1388.200548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.209914] Call Trace: [ 1388.212526] dump_stack+0x172/0x1f0 [ 1388.216179] dump_header+0x10f/0xb6c [ 1388.219913] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1388.225036] ? ___ratelimit+0x60/0x595 [ 1388.228947] ? do_raw_spin_unlock+0x57/0x270 [ 1388.233383] oom_kill_process.cold+0x10/0x6f5 [ 1388.237903] ? task_will_free_mem+0x139/0x6e0 [ 1388.242415] ? debug_smp_processor_id+0x1c/0x20 [ 1388.247122] out_of_memory+0x79a/0x1280 [ 1388.251129] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1388.256260] ? oom_killer_disable+0x280/0x280 [ 1388.260774] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1388.265911] mem_cgroup_out_of_memory+0x99/0xe0 [ 1388.270597] ? memcg_memory_event+0x40/0x40 [ 1388.274958] ? _raw_spin_unlock+0x2d/0x50 [ 1388.279126] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1388.284244] try_charge+0xfec/0x1570 [ 1388.287970] ? find_held_lock+0x35/0x130 [ 1388.292052] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1388.296917] ? kasan_check_read+0x11/0x20 [ 1388.301087] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1388.305955] mem_cgroup_try_charge+0x24d/0x5e0 [ 1388.310562] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1388.315509] shmem_getpage_gfp+0x69b/0x3520 [ 1388.319869] ? shmem_add_to_page_cache+0x1200/0x1200 [ 1388.324983] ? debug_smp_processor_id+0x1c/0x20 [ 1388.329663] ? lock_downgrade+0x810/0x810 [ 1388.333835] shmem_fault+0x22d/0x760 [ 1388.337565] ? __handle_mm_fault+0x349d/0x3f20 [ 1388.342158] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 1388.347458] ? lock_downgrade+0x810/0x810 [ 1388.351637] __do_fault+0x116/0x4e0 [ 1388.355284] __handle_mm_fault+0x2cbd/0x3f20 [ 1388.359718] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1388.364577] ? find_held_lock+0x35/0x130 [ 1388.368666] ? handle_mm_fault+0x322/0xb30 [ 1388.372938] ? kasan_check_read+0x11/0x20 [ 1388.377112] handle_mm_fault+0x43f/0xb30 [ 1388.381197] __get_user_pages+0x7b6/0x1a40 [ 1388.385457] ? follow_page_mask+0x19a0/0x19a0 [ 1388.389979] ? memset+0x32/0x40 [ 1388.393275] populate_vma_page_range+0x20d/0x2a0 [ 1388.398050] __mm_populate+0x204/0x380 [ 1388.401954] ? populate_vma_page_range+0x2a0/0x2a0 [ 1388.406915] vm_mmap_pgoff+0x213/0x230 [ 1388.410824] ? vma_is_stack_for_current+0xd0/0xd0 [ 1388.415678] ? kasan_check_read+0x11/0x20 [ 1388.419838] ? _copy_to_user+0xc9/0x120 [ 1388.423825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1388.429377] ksys_mmap_pgoff+0xf7/0x630 [ 1388.433372] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1388.438312] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1388.443078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1388.447849] ? do_syscall_64+0x26/0x610 [ 1388.451832] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.457212] __x64_sys_mmap+0xe9/0x1b0 [ 1388.461126] do_syscall_64+0x103/0x610 [ 1388.465030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.470225] RIP: 0033:0x457e29 [ 1388.473426] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1388.492445] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1388.500173] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 1388.507451] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 1388.514735] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1388.522015] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1388.529301] R13: 00000000004c3b88 R14: 00000000004d6ca0 R15: 00000000ffffffff [ 1388.611372] memory: usage 30720kB, limit 30720kB, failcnt 467 [ 1388.617438] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1388.641154] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1388.659797] Memory cgroup stats for /syz4: cache:3564KB rss:15980KB rss_huge:14336KB shmem:3652KB mapped_file:3564KB dirty:0KB writeback:0KB swap:0KB inactive_anon:3696KB active_anon:16056KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1388.728599] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20616,uid=0 [ 1388.743523] Memory cgroup out of memory: Kill process 20616 (syz-executor.4) score 2176 or sacrifice child [ 1388.753636] Killed process 20616 (syz-executor.4) total-vm:72448kB, anon-rss:100kB, file-rss:34944kB, shmem-rss:3692kB [ 1388.766289] oom_reaper: reaped process 20616 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:3700kB 19:36:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:04 executing program 5: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:04 executing program 3: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:04 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), 0x4) accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000340)=0xffffffffffffff44) exit(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x22000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x7530}, 0x16, 0xab2}, 0x18) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, &(0x7f0000000280)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x2, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000003080)=""/4096, 0x40f00, 0xfffffffffffffffc}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0xd01fdefdd1890d79, 0x0) 19:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x26d, 0xffffffffffffffff, 0x0, 0xf06d0f5bc02c0ba7) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x8, "f982cca3f6b67f6d5d9867a558126a5c0cd3e797aec28508c2f871a69e2a57ed", 0x200, 0x0, 0xfff}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) 19:36:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:04 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), 0x4) accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000340)=0xffffffffffffff44) exit(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x22000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x7530}, 0x16, 0xab2}, 0x18) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, &(0x7f0000000280)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x2, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000003080)=""/4096, 0x40f00, 0xfffffffffffffffc}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0xd01fdefdd1890d79, 0x0) 19:36:04 executing program 3: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:04 executing program 5: socket$kcm(0xa, 0x522000000003, 0x11) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0xff7, 0xfffffff7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='}%\x00', 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 19:36:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="340367", &(0x7f00000002c0)}, 0x20) 19:36:05 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:05 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20006007, 0x1) acct(&(0x7f0000000000)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) 19:36:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1000005, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 19:36:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:05 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x600210) r0 = memfd_create(&(0x7f0000000180)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = gettid() dup3(r3, r1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) pwritev(r0, &(0x7f0000f50f90), 0x0, 0x0) [ 1390.168604] audit: type=1800 audit(1550691365.414:562): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17281 res=0 19:36:05 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) [ 1390.236507] audit: type=1804 audit(1550691365.454:563): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/384/file0/file0" dev="sda1" ino=17281 res=1 [ 1390.310035] ubi: mtd0 is already attached to ubi0 19:36:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x90000802}) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3bfe, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000004001fc) fanotify_init(0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) 19:36:05 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0185879, 0x20000001) 19:36:05 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20006007, 0x1) acct(&(0x7f0000000000)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) 19:36:06 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) [ 1390.839209] audit: type=1804 audit(1550691366.084:564): pid=20775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/384/file0/file0" dev="sda1" ino=17281 res=1 [ 1390.925697] ubi: mtd0 is already attached to ubi0 19:36:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000020000057d) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd) close(r0) [ 1390.979754] audit: type=1804 audit(1550691366.114:565): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/384/file0/file0" dev="sda1" ino=17281 res=1 19:36:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:06 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) 19:36:06 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:06 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20006007, 0x1) acct(&(0x7f0000000000)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) 19:36:06 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x600210) r0 = memfd_create(&(0x7f0000000180)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = gettid() dup3(r3, r1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) pwritev(r0, &(0x7f0000f50f90), 0x0, 0x0) [ 1391.306253] audit: type=1800 audit(1550691366.544:566): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16881 res=0 19:36:06 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20006007, 0x1) acct(&(0x7f0000000000)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) 19:36:06 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) 19:36:06 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:06 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) [ 1391.434432] audit: type=1800 audit(1550691366.604:567): pid=20830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16898 res=0 [ 1391.463258] ubi: mtd0 is already attached to ubi0 19:36:06 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x600210) r0 = memfd_create(&(0x7f0000000180)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = gettid() dup3(r3, r1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) pwritev(r0, &(0x7f0000f50f90), 0x0, 0x0) 19:36:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) [ 1391.580847] audit: type=1804 audit(1550691366.604:568): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir355699789/syzkaller.LTxjrT/456/file0" dev="sda1" ino=16881 res=1 [ 1391.637569] audit: type=1804 audit(1550691366.714:569): pid=20821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/385/file0/file0" dev="sda1" ino=16898 res=1 19:36:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@local, 0x0, 0x6c}, @in6}}}, 0xf8}, 0x8}, 0x0) [ 1391.782445] audit: type=1800 audit(1550691367.034:570): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16658 res=0 19:36:07 executing program 5: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x37d) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1391.914212] ubi: mtd0 is already attached to ubi0 [ 1392.090178] ubi: mtd0 is already attached to ubi0 19:36:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) [ 1392.308124] audit: type=1804 audit(1550691367.054:571): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir355699789/syzkaller.LTxjrT/457/file0" dev="sda1" ino=16658 res=1 [ 1392.355289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 19:36:07 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x600210) r0 = memfd_create(&(0x7f0000000180)='^\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = gettid() dup3(r3, r1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) pwritev(r0, &(0x7f0000f50f90), 0x0, 0x0) 19:36:07 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) [ 1392.450604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 19:36:07 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000440)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000580)="eb3c906dffff0000666174000204010002000270fff8027671031df46766df54a31a17740b2b", 0x26}], 0x0, 0x0) 19:36:08 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:08 executing program 5: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x37d) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1392.855697] ubi: mtd0 is already attached to ubi0 [ 1393.189604] ubi: mtd0 is already attached to ubi0 [ 1393.321110] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1393.510334] ubi: mtd0 is already attached to ubi0 19:36:08 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3254, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02b9017868a3a9fd95d400f2fa6975cf03b0353cdaac4f18"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0xef) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x40186f40, 0x712000) 19:36:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfd1) 19:36:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) 19:36:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000080)=0x7e) write$vhci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="04d43fd5ba38d4f5eec130285d55a4c6c090219b81030e1e5bddaea8347afb20c5058dc76bc1bdf27ae14a826cae1b6475d41f05bd74ea772c1071e2e9fc297f81705c76588e7d4300ddf7caf261b715a5275c5882d0da4b14cd19ea5f678cfd5e3b397cfbdff60dfefb8d77b159d1d9ee8cfe73a0ad6687849254850a97bdb07ff69dbe3d10218628387e012c7f9fd4068aa9f2400a7b9cfe3fc0a270f3bbed9842efbe29a900a6445ca3f2"], 0xac) 19:36:09 executing program 5: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x37d) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19:36:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) 19:36:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfd1) [ 1394.272389] ubi: mtd0 is already attached to ubi0 19:36:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) stat(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000240)) 19:36:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x0, 0x1, [0xfff, 0x104, 0x1fc, 0x40, 0x7f, 0xfffffffffffffffb, 0x8, 0x53]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="000028bd7000fdf8312502000000080003003b000000080001004e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c4703ce437f7406aa9ee04723bff76a47fc470541ab433414a8682417b501ac0381b4b06c489a090000000000b60024e4b8a38d24ff2a2f0200000000000000422cbcc97535a7200a970b39a73df5dd21ac7dbd281bf3a20b1ab70b4c08c43dd80f2944438cc24aa5f864623565c0df2bc5db2fb3a0cf2d776de9630b64e574e0e4defaf8a2a2de653b3352f14a6125fbd929695f93f9fc1301ce1b52e9eeb070461543cc5d2f19d3b8982aeca4cae6ee490dccd5cae6650d6089f89c359dc7e7751ae68b101c5b055d9eae7f8cfcc01575de3f89bb1ee5033f7c481c97c29cb637a7967b151748b3b64bf1e51d70e9670c250c3d0e6c791efaf19a6cae074e364e65d77a75586850044a50bb642d1165a700000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) dup2(r6, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r8, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[]}}, 0x4008000) ioctl$sock_proto_private(r7, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c") syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) 19:36:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfd1) [ 1394.571748] bond0: Error: Device is in use and cannot be enslaved 19:36:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) 19:36:10 executing program 5: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x37d) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1394.872657] IPVS: ftp: loaded support on port[0] = 21 19:36:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfd1) 19:36:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 19:36:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) stat(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000240)) 19:36:10 executing program 2: socketpair$unix(0x1, 0x8000000000000005, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x0, @local}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x11, &(0x7f0000000040)=@assoc_value={r3}, 0x8) 19:36:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 1395.315379] bond0: Error: Device is in use and cannot be enslaved 19:36:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) [ 1395.462686] IPVS: ftp: loaded support on port[0] = 21 19:36:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) stat(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000240)) 19:36:10 executing program 1: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) lstat(&(0x7f0000000300)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000780)) getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) ioprio_get$uid(0x0, r1) chown(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:36:11 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='ext3\x00', 0x0, 0x0) 19:36:11 executing program 5: unshare(0x8000000) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup2(r1, r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 19:36:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) stat(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000240)) [ 1395.971503] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1396.093302] 9pnet_virtio: no channels available for device 127.0.0.1 19:36:11 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) 19:36:11 executing program 0: syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) 19:36:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup2(r1, r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 19:36:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000040)={0x14, 0x13, 0x3ef, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 19:36:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x98000000, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 19:36:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x0, 0x40, 0x7fffffff, 0xfffffffffffffff9, 0x6, 0x2, 0x401, 0x9, 0x5, 0x8, 0x4, 0x7ff}, {0x984, 0x3, 0x400, 0x5, 0x100, 0x5, 0xffffffffffffffff, 0xfffffffffffffffb, 0xf21b, 0x3e427aff, 0x48771ac0, 0x6, 0x4}, {0x9, 0x573, 0x485d, 0x3481, 0x1, 0xa, 0xffffffff, 0x8, 0x21, 0x0, 0x4, 0x0, 0x2a}], 0x2}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x214, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="14703b000000"], 0x6) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="2d706964738c07022ef74d45d88313e120c3ddfa5a26ec189468415f0c368f8652c90575adb6c2cc01000000fe1ef28f7739d37824aac334d1440dbc6f5fa86e88b0023a0fbd22deb83286b9109d506026d96e8b9385462f8be028db88771f96747a1f1262f9a66c8f8c226277eea846aa838ca4322cbabc9b9304dc6dfac113ce2308fd9b8f753be4aa0c4e50d7aa776dd75c01718c5a97d130b2a75205dd0775c51b03438859bd4553cc17c622a8f7caa4affd66f1e29813dda04617e0e6050b4aff4312fef18c941004311325ac1fdf89a8b630"], 0xd5) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xa3) bind$unix(r5, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 19:36:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000a07fff)) 19:36:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ppoll(&(0x7f0000000180)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x2d6) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 19:36:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup2(r1, r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 19:36:12 executing program 5: unshare(0x8000000) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 19:36:12 executing program 0: write$capi20_data(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x5ae8) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x1, @broadcast, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 19:36:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup2(r1, r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 19:36:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x0, 0x40, 0x7fffffff, 0xfffffffffffffff9, 0x6, 0x2, 0x401, 0x9, 0x5, 0x8, 0x4, 0x7ff}, {0x984, 0x3, 0x400, 0x5, 0x100, 0x5, 0xffffffffffffffff, 0xfffffffffffffffb, 0xf21b, 0x3e427aff, 0x48771ac0, 0x6, 0x4}, {0x9, 0x573, 0x485d, 0x3481, 0x1, 0xa, 0xffffffff, 0x8, 0x21, 0x0, 0x4, 0x0, 0x2a}], 0x2}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x214, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="14703b000000"], 0x6) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="2d706964738c07022ef74d45d88313e120c3ddfa5a26ec189468415f0c368f8652c90575adb6c2cc01000000fe1ef28f7739d37824aac334d1440dbc6f5fa86e88b0023a0fbd22deb83286b9109d506026d96e8b9385462f8be028db88771f96747a1f1262f9a66c8f8c226277eea846aa838ca4322cbabc9b9304dc6dfac113ce2308fd9b8f753be4aa0c4e50d7aa776dd75c01718c5a97d130b2a75205dd0775c51b03438859bd4553cc17c622a8f7caa4affd66f1e29813dda04617e0e6050b4aff4312fef18c941004311325ac1fdf89a8b630"], 0xd5) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xa3) bind$unix(r5, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 19:36:13 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:13 executing program 5: unshare(0x8000000) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:13 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) 19:36:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x0, 0x40, 0x7fffffff, 0xfffffffffffffff9, 0x6, 0x2, 0x401, 0x9, 0x5, 0x8, 0x4, 0x7ff}, {0x984, 0x3, 0x400, 0x5, 0x100, 0x5, 0xffffffffffffffff, 0xfffffffffffffffb, 0xf21b, 0x3e427aff, 0x48771ac0, 0x6, 0x4}, {0x9, 0x573, 0x485d, 0x3481, 0x1, 0xa, 0xffffffff, 0x8, 0x21, 0x0, 0x4, 0x0, 0x2a}], 0x2}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x214, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="14703b000000"], 0x6) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="2d706964738c07022ef74d45d88313e120c3ddfa5a26ec189468415f0c368f8652c90575adb6c2cc01000000fe1ef28f7739d37824aac334d1440dbc6f5fa86e88b0023a0fbd22deb83286b9109d506026d96e8b9385462f8be028db88771f96747a1f1262f9a66c8f8c226277eea846aa838ca4322cbabc9b9304dc6dfac113ce2308fd9b8f753be4aa0c4e50d7aa776dd75c01718c5a97d130b2a75205dd0775c51b03438859bd4553cc17c622a8f7caa4affd66f1e29813dda04617e0e6050b4aff4312fef18c941004311325ac1fdf89a8b630"], 0xd5) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xa3) bind$unix(r5, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 19:36:13 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 19:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) clone(0x200002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 19:36:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 19:36:13 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 19:36:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) clone(0x200002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 19:36:14 executing program 5: unshare(0x8000000) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:14 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r3 = fcntl$dupfd(r0, 0x0, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x0, 0x40, 0x7fffffff, 0xfffffffffffffff9, 0x6, 0x2, 0x401, 0x9, 0x5, 0x8, 0x4, 0x7ff}, {0x984, 0x3, 0x400, 0x5, 0x100, 0x5, 0xffffffffffffffff, 0xfffffffffffffffb, 0xf21b, 0x3e427aff, 0x48771ac0, 0x6, 0x4}, {0x9, 0x573, 0x485d, 0x3481, 0x1, 0xa, 0xffffffff, 0x8, 0x21, 0x0, 0x4, 0x0, 0x2a}], 0x2}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x214, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="14703b000000"], 0x6) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="2d706964738c07022ef74d45d88313e120c3ddfa5a26ec189468415f0c368f8652c90575adb6c2cc01000000fe1ef28f7739d37824aac334d1440dbc6f5fa86e88b0023a0fbd22deb83286b9109d506026d96e8b9385462f8be028db88771f96747a1f1262f9a66c8f8c226277eea846aa838ca4322cbabc9b9304dc6dfac113ce2308fd9b8f753be4aa0c4e50d7aa776dd75c01718c5a97d130b2a75205dd0775c51b03438859bd4553cc17c622a8f7caa4affd66f1e29813dda04617e0e6050b4aff4312fef18c941004311325ac1fdf89a8b630"], 0xd5) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xa3) bind$unix(r5, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 19:36:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:14 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 19:36:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) clone(0x200002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 19:36:14 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 19:36:14 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:14 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:14 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x22) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 19:36:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000140)) 19:36:15 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) clone(0x200002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 19:36:15 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xac78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xe52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d00)={0x0, 0x0}) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001840)={0x0, 0x80000004}, &(0x7f00000003c0)=0xfffffffffffffded) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f00000006c0)={{0x1, 0x801}, 'port0\x00', 0x1c, 0x0, 0xe6a, 0x9, 0x5, 0x7d, 0xed, 0x0, 0x5, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a58, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'bridge0\x00'}}, 0x14) r5 = memfd_create(&(0x7f0000000a00)='\t\x00evqrbi\xff\x00\x1a\xfd3\xfe_-\x8beA\xb2]\xe7\x94\xcc-\bO#\xe6\xefc\x02\x19\xd0\xed\xcf\x90}mXN\xf1U\n\x84H;\xf3\xe3>-\xcf\x99\x8aL\x06\x9d\xbbq\x83f\xf1\x88wZ\x1f\x15T\x86\x1a\xbbfZ \xd8;Zz,n\x96\xa30\n\xe3\x03\xea\xdeb7k\x95\xd3\x93G\x7f\x99K3\x96\xc8\xeea\x18\xee\xf48t\x1a\x02|\x95\xf4\xff\x8a)\x96$\x01\xa7\x15L\xdc\xee7P&B|\xf8Y\xe5\x9f\xd2hmE2\x89\f\xb3m\xf4', 0x3) read$eventfd(r3, &(0x7f00000008c0), 0xffffffffffffff06) r6 = openat$cgroup_ro(r3, &(0x7f0000000ac0)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000900)={'nat\x00', 0x0, 0x7, 0xca, [], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/202}, &(0x7f0000001b80)=0xfffffffffffffe2f) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="025505b6826af2af2872a2d88e93a0eb453fe912f5fa1e7d44fd4041ca2b4a5208a8d086c2dd24b975efa9b038ec20435c4bda66566549673bbef99d4f3c5ccdce9480ca091cb78e8161f7d2ff5970569657bbd4da6fc0444343ed8b23ea", 0x5e}], 0x1, 0x0, 0x0, 0x4000000}, 0x84) r7 = socket$inet6(0xa, 0x82803, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000780)=""/226, &(0x7f0000000300)=0xe2) ioctl(r7, 0x8912, &(0x7f0000001080)="025c020000000000000070a5a436b11ba546f513d3633963009a3e40c038de16d05be03a933aeb0b256821f8cedb386e5bb061bf34d4b84cc4444934eba32eb33651fb6c043c09a0eb151d5f9c4fe74bdadc6bd39c773389c31c416aa1e55ef3116ccc66f8919a479442a0e224c1d1a984b0a54c33568999743ff00b1e0f672cb7be801a1440a0b99095a80397c13c8a77bdd03b13272e184d763cb9b7bfb025232029fef6b9b3f11f83e865abf418c3e50d0b68083cb06c629c6eb4874e1c4b7034ea4aec3611ee68ac14ae4a6653bbadfcff158beeec9d57d17113") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x401, 0x1, 0x3, 0x0, r5, 0xfffffffffffffffc}, 0x2c) ioctl(r6, 0x200859, &(0x7f00000005c0)="ad5c56605c6ef1947ed326a6a0dbb604d8c14e6dbf3b3744a2638aac054d5dab450b20593a8d0ddbf789a2ea528be323214fd37e91cf0a8148c0b5d5c112256dac584435714777108f80f851b58639e1586456704552d0651abfe1105c77364369c12784fc6dcddec8b694c1ce4c82871ee2aad459be98d679647f4cbc490d161dfb5a6d4ffcd9472b622c8d9e311bb4c17199ba43a3ea02c4b1e0649af34ceb9c796b357ac5478bc5120cb103b3123c15b1f2b387983afff02d0372f825e65ef15ed497a651541d2a929d8e054a05a82fd46cb0cd4060c378f3b6f617680ce59198c611acda03437f19744a691f4aa37c04043be41211bc") setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1, 0x2}, {0xa, 0x4e24, 0x200000000, @loopback, 0x4000000000000000}, 0x3ff, [0xffff, 0x8000, 0x0, 0xffffffffffffff7f, 0xffffffff, 0x6, 0x6, 0x4]}, 0x5c) getegid() r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000980)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0x106) getpeername$packet(r4, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000c80)={@local}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001240)={'team0\x00', r10}) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d40)={@local}, &(0x7f0000000d80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@local, @in=@multicast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000011c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) r11 = socket$inet6(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x99a, 0xfc94) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x2dfd, 0x1, 0x8000000000008000}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r11, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0xfffffffffffffffe, 0x4, @remote}}, 0x5c) 19:36:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x34}}) close(r2) close(r1) 19:36:15 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:36:15 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:15 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xd, 0xa00) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setpgid(r2, r2) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) getpgid(0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1e, &(0x7f0000000240)={0x14, 0x2, 0x8}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x53, r3, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r3, r5, 0xb0, 0x8) r6 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = dup(r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x412, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) 19:36:15 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 19:36:16 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) [ 1400.931455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:36:16 executing program 2: io_setup(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000019c0)="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", 0xffc, 0x5, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/158, 0x9e}, {0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$mice(0x0, 0x0, 0x40000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00') fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000880)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x7}}, 0x20) [ 1401.056963] kauditd_printk_skb: 10 callbacks suppressed [ 1401.056980] audit: type=1804 audit(1550691376.304:582): pid=21202 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/400/bus" dev="sda1" ino=17694 res=1 19:36:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb'}}]}) 19:36:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x8000000005) [ 1401.284358] audit: type=1804 audit(1550691376.344:583): pid=21208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/400/bus" dev="sda1" ino=17694 res=1 19:36:16 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xac78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xe52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d00)={0x0, 0x0}) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001840)={0x0, 0x80000004}, &(0x7f00000003c0)=0xfffffffffffffded) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f00000006c0)={{0x1, 0x801}, 'port0\x00', 0x1c, 0x0, 0xe6a, 0x9, 0x5, 0x7d, 0xed, 0x0, 0x5, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a58, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'bridge0\x00'}}, 0x14) r5 = memfd_create(&(0x7f0000000a00)='\t\x00evqrbi\xff\x00\x1a\xfd3\xfe_-\x8beA\xb2]\xe7\x94\xcc-\bO#\xe6\xefc\x02\x19\xd0\xed\xcf\x90}mXN\xf1U\n\x84H;\xf3\xe3>-\xcf\x99\x8aL\x06\x9d\xbbq\x83f\xf1\x88wZ\x1f\x15T\x86\x1a\xbbfZ \xd8;Zz,n\x96\xa30\n\xe3\x03\xea\xdeb7k\x95\xd3\x93G\x7f\x99K3\x96\xc8\xeea\x18\xee\xf48t\x1a\x02|\x95\xf4\xff\x8a)\x96$\x01\xa7\x15L\xdc\xee7P&B|\xf8Y\xe5\x9f\xd2hmE2\x89\f\xb3m\xf4', 0x3) read$eventfd(r3, &(0x7f00000008c0), 0xffffffffffffff06) r6 = openat$cgroup_ro(r3, &(0x7f0000000ac0)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000900)={'nat\x00', 0x0, 0x7, 0xca, [], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/202}, &(0x7f0000001b80)=0xfffffffffffffe2f) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="025505b6826af2af2872a2d88e93a0eb453fe912f5fa1e7d44fd4041ca2b4a5208a8d086c2dd24b975efa9b038ec20435c4bda66566549673bbef99d4f3c5ccdce9480ca091cb78e8161f7d2ff5970569657bbd4da6fc0444343ed8b23ea", 0x5e}], 0x1, 0x0, 0x0, 0x4000000}, 0x84) r7 = socket$inet6(0xa, 0x82803, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000780)=""/226, &(0x7f0000000300)=0xe2) ioctl(r7, 0x8912, &(0x7f0000001080)="025c020000000000000070a5a436b11ba546f513d3633963009a3e40c038de16d05be03a933aeb0b256821f8cedb386e5bb061bf34d4b84cc4444934eba32eb33651fb6c043c09a0eb151d5f9c4fe74bdadc6bd39c773389c31c416aa1e55ef3116ccc66f8919a479442a0e224c1d1a984b0a54c33568999743ff00b1e0f672cb7be801a1440a0b99095a80397c13c8a77bdd03b13272e184d763cb9b7bfb025232029fef6b9b3f11f83e865abf418c3e50d0b68083cb06c629c6eb4874e1c4b7034ea4aec3611ee68ac14ae4a6653bbadfcff158beeec9d57d17113") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x401, 0x1, 0x3, 0x0, r5, 0xfffffffffffffffc}, 0x2c) ioctl(r6, 0x200859, &(0x7f00000005c0)="ad5c56605c6ef1947ed326a6a0dbb604d8c14e6dbf3b3744a2638aac054d5dab450b20593a8d0ddbf789a2ea528be323214fd37e91cf0a8148c0b5d5c112256dac584435714777108f80f851b58639e1586456704552d0651abfe1105c77364369c12784fc6dcddec8b694c1ce4c82871ee2aad459be98d679647f4cbc490d161dfb5a6d4ffcd9472b622c8d9e311bb4c17199ba43a3ea02c4b1e0649af34ceb9c796b357ac5478bc5120cb103b3123c15b1f2b387983afff02d0372f825e65ef15ed497a651541d2a929d8e054a05a82fd46cb0cd4060c378f3b6f617680ce59198c611acda03437f19744a691f4aa37c04043be41211bc") setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1, 0x2}, {0xa, 0x4e24, 0x200000000, @loopback, 0x4000000000000000}, 0x3ff, [0xffff, 0x8000, 0x0, 0xffffffffffffff7f, 0xffffffff, 0x6, 0x6, 0x4]}, 0x5c) getegid() r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000980)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0x106) getpeername$packet(r4, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000c80)={@local}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001240)={'team0\x00', r10}) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d40)={@local}, &(0x7f0000000d80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@local, @in=@multicast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000011c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001280)=ANY=[@ANYBLOB="080007000000000048b951e3d5c8decff880f3255a7761b2e93d2fed78225d88ec1adb1727cbdb0435e298fef701bf18dd57b5950d03fdbd54983ede8e81a8c95a750dfd3589a54dd15f59a493336a1b2155f229107880d6aa506184288c296844294496263ab605274621dd969604db1b28da0f35bfc66bf06407ff23eb6f7536169d49dbadefa5f8aab01b2bd2beff768a8243e0c234a8a1c9557fe68de0a04cba6bf50cf21634a0fb5d518b5e4976041b98cae8b76c4b0a326008c0bdcca047a20912044426309fc66b17355eb79f7c1b919537bf54f4cb7c8f98bf586ddb3a72838899fffca89ffa77b244803d8b9ea36cddfcc4d8dcc84c83fa3234003702705866c0ed4bf63a3beb065c"], 0x1}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) r11 = socket$inet6(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x99a, 0xfc94) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x2dfd, 0x1, 0x8000000000008000}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r11, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0xfffffffffffffffe, 0x4, @remote}}, 0x5c) [ 1401.403982] audit: type=1804 audit(1550691376.344:584): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/400/bus" dev="sda1" ino=17694 res=1 19:36:16 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = socket$inet_sctp(0x2, 0xfffffffffffffffb, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000580)) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 19:36:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) [ 1401.621060] audit: type=1804 audit(1550691376.354:585): pid=21208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir373501256/syzkaller.vAKbZM/400/bus" dev="sda1" ino=17694 res=1 19:36:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x5, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) 19:36:17 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000016007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 19:36:17 executing program 4: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x398fde67, 0x8}, &(0x7f0000000600)=0x90) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 19:36:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) 19:36:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:17 executing program 4: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x398fde67, 0x8}, &(0x7f0000000600)=0x90) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 19:36:18 executing program 2: io_setup(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000019c0)="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", 0xffc, 0x5, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/158, 0x9e}, {0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$mice(0x0, 0x0, 0x40000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00') fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000880)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x7}}, 0x20) 19:36:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xac78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xe52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d00)={0x0, 0x0}) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001840)={0x0, 0x80000004}, &(0x7f00000003c0)=0xfffffffffffffded) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f00000006c0)={{0x1, 0x801}, 'port0\x00', 0x1c, 0x0, 0xe6a, 0x9, 0x5, 0x7d, 0xed, 0x0, 0x5, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a58, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'bridge0\x00'}}, 0x14) r5 = memfd_create(&(0x7f0000000a00)='\t\x00evqrbi\xff\x00\x1a\xfd3\xfe_-\x8beA\xb2]\xe7\x94\xcc-\bO#\xe6\xefc\x02\x19\xd0\xed\xcf\x90}mXN\xf1U\n\x84H;\xf3\xe3>-\xcf\x99\x8aL\x06\x9d\xbbq\x83f\xf1\x88wZ\x1f\x15T\x86\x1a\xbbfZ \xd8;Zz,n\x96\xa30\n\xe3\x03\xea\xdeb7k\x95\xd3\x93G\x7f\x99K3\x96\xc8\xeea\x18\xee\xf48t\x1a\x02|\x95\xf4\xff\x8a)\x96$\x01\xa7\x15L\xdc\xee7P&B|\xf8Y\xe5\x9f\xd2hmE2\x89\f\xb3m\xf4', 0x3) read$eventfd(r3, &(0x7f00000008c0), 0xffffffffffffff06) r6 = openat$cgroup_ro(r3, &(0x7f0000000ac0)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000900)={'nat\x00', 0x0, 0x7, 0xca, [], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/202}, &(0x7f0000001b80)=0xfffffffffffffe2f) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="025505b6826af2af2872a2d88e93a0eb453fe912f5fa1e7d44fd4041ca2b4a5208a8d086c2dd24b975efa9b038ec20435c4bda66566549673bbef99d4f3c5ccdce9480ca091cb78e8161f7d2ff5970569657bbd4da6fc0444343ed8b23ea", 0x5e}], 0x1, 0x0, 0x0, 0x4000000}, 0x84) r7 = socket$inet6(0xa, 0x82803, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000780)=""/226, &(0x7f0000000300)=0xe2) ioctl(r7, 0x8912, &(0x7f0000001080)="025c020000000000000070a5a436b11ba546f513d3633963009a3e40c038de16d05be03a933aeb0b256821f8cedb386e5bb061bf34d4b84cc4444934eba32eb33651fb6c043c09a0eb151d5f9c4fe74bdadc6bd39c773389c31c416aa1e55ef3116ccc66f8919a479442a0e224c1d1a984b0a54c33568999743ff00b1e0f672cb7be801a1440a0b99095a80397c13c8a77bdd03b13272e184d763cb9b7bfb025232029fef6b9b3f11f83e865abf418c3e50d0b68083cb06c629c6eb4874e1c4b7034ea4aec3611ee68ac14ae4a6653bbadfcff158beeec9d57d17113") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x401, 0x1, 0x3, 0x0, r5, 0xfffffffffffffffc}, 0x2c) ioctl(r6, 0x200859, &(0x7f00000005c0)="ad5c56605c6ef1947ed326a6a0dbb604d8c14e6dbf3b3744a2638aac054d5dab450b20593a8d0ddbf789a2ea528be323214fd37e91cf0a8148c0b5d5c112256dac584435714777108f80f851b58639e1586456704552d0651abfe1105c77364369c12784fc6dcddec8b694c1ce4c82871ee2aad459be98d679647f4cbc490d161dfb5a6d4ffcd9472b622c8d9e311bb4c17199ba43a3ea02c4b1e0649af34ceb9c796b357ac5478bc5120cb103b3123c15b1f2b387983afff02d0372f825e65ef15ed497a651541d2a929d8e054a05a82fd46cb0cd4060c378f3b6f617680ce59198c611acda03437f19744a691f4aa37c04043be41211bc") setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1, 0x2}, {0xa, 0x4e24, 0x200000000, @loopback, 0x4000000000000000}, 0x3ff, [0xffff, 0x8000, 0x0, 0xffffffffffffff7f, 0xffffffff, 0x6, 0x6, 0x4]}, 0x5c) getegid() r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000980)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0x106) getpeername$packet(r4, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000c80)={@local}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001240)={'team0\x00', r10}) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d40)={@local}, &(0x7f0000000d80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@local, @in=@multicast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000011c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) r11 = socket$inet6(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x99a, 0xfc94) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x2dfd, 0x1, 0x8000000000008000}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r11, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0xfffffffffffffffe, 0x4, @remote}}, 0x5c) 19:36:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) 19:36:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:18 executing program 4: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x398fde67, 0x8}, &(0x7f0000000600)=0x90) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 19:36:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) 19:36:18 executing program 4: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x398fde67, 0x8}, &(0x7f0000000600)=0x90) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 19:36:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) 19:36:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:19 executing program 2: io_setup(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000019c0)="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", 0xffc, 0x5, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/158, 0x9e}, {0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$mice(0x0, 0x0, 0x40000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00') fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000880)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x7}}, 0x20) 19:36:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000003c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @broadcast}}) 19:36:19 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xac78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xe52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d00)={0x0, 0x0}) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001840)={0x0, 0x80000004}, &(0x7f00000003c0)=0xfffffffffffffded) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a45321, &(0x7f00000006c0)={{0x1, 0x801}, 'port0\x00', 0x1c, 0x0, 0xe6a, 0x9, 0x5, 0x7d, 0xed, 0x0, 0x5, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a58, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'bridge0\x00'}}, 0x14) r5 = memfd_create(&(0x7f0000000a00)='\t\x00evqrbi\xff\x00\x1a\xfd3\xfe_-\x8beA\xb2]\xe7\x94\xcc-\bO#\xe6\xefc\x02\x19\xd0\xed\xcf\x90}mXN\xf1U\n\x84H;\xf3\xe3>-\xcf\x99\x8aL\x06\x9d\xbbq\x83f\xf1\x88wZ\x1f\x15T\x86\x1a\xbbfZ \xd8;Zz,n\x96\xa30\n\xe3\x03\xea\xdeb7k\x95\xd3\x93G\x7f\x99K3\x96\xc8\xeea\x18\xee\xf48t\x1a\x02|\x95\xf4\xff\x8a)\x96$\x01\xa7\x15L\xdc\xee7P&B|\xf8Y\xe5\x9f\xd2hmE2\x89\f\xb3m\xf4', 0x3) read$eventfd(r3, &(0x7f00000008c0), 0xffffffffffffff06) r6 = openat$cgroup_ro(r3, &(0x7f0000000ac0)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000900)={'nat\x00', 0x0, 0x7, 0xca, [], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/202}, &(0x7f0000001b80)=0xfffffffffffffe2f) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="025505b6826af2af2872a2d88e93a0eb453fe912f5fa1e7d44fd4041ca2b4a5208a8d086c2dd24b975efa9b038ec20435c4bda66566549673bbef99d4f3c5ccdce9480ca091cb78e8161f7d2ff5970569657bbd4da6fc0444343ed8b23ea", 0x5e}], 0x1, 0x0, 0x0, 0x4000000}, 0x84) r7 = socket$inet6(0xa, 0x82803, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000780)=""/226, &(0x7f0000000300)=0xe2) ioctl(r7, 0x8912, &(0x7f0000001080)="025c020000000000000070a5a436b11ba546f513d3633963009a3e40c038de16d05be03a933aeb0b256821f8cedb386e5bb061bf34d4b84cc4444934eba32eb33651fb6c043c09a0eb151d5f9c4fe74bdadc6bd39c773389c31c416aa1e55ef3116ccc66f8919a479442a0e224c1d1a984b0a54c33568999743ff00b1e0f672cb7be801a1440a0b99095a80397c13c8a77bdd03b13272e184d763cb9b7bfb025232029fef6b9b3f11f83e865abf418c3e50d0b68083cb06c629c6eb4874e1c4b7034ea4aec3611ee68ac14ae4a6653bbadfcff158beeec9d57d17113") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x401, 0x1, 0x3, 0x0, r5, 0xfffffffffffffffc}, 0x2c) ioctl(r6, 0x200859, &(0x7f00000005c0)="ad5c56605c6ef1947ed326a6a0dbb604d8c14e6dbf3b3744a2638aac054d5dab450b20593a8d0ddbf789a2ea528be323214fd37e91cf0a8148c0b5d5c112256dac584435714777108f80f851b58639e1586456704552d0651abfe1105c77364369c12784fc6dcddec8b694c1ce4c82871ee2aad459be98d679647f4cbc490d161dfb5a6d4ffcd9472b622c8d9e311bb4c17199ba43a3ea02c4b1e0649af34ceb9c796b357ac5478bc5120cb103b3123c15b1f2b387983afff02d0372f825e65ef15ed497a651541d2a929d8e054a05a82fd46cb0cd4060c378f3b6f617680ce59198c611acda03437f19744a691f4aa37c04043be41211bc") setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1, 0x2}, {0xa, 0x4e24, 0x200000000, @loopback, 0x4000000000000000}, 0x3ff, [0xffff, 0x8000, 0x0, 0xffffffffffffff7f, 0xffffffff, 0x6, 0x6, 0x4]}, 0x5c) getegid() r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000980)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0x106) getpeername$packet(r4, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000c80)={@local}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001240)={'team0\x00', r10}) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d40)={@local}, &(0x7f0000000d80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@local, @in=@multicast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f00000011c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) r11 = socket$inet6(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x99a, 0xfc94) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x2dfd, 0x1, 0x8000000000008000}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r11, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0xfffffffffffffffe, 0x4, @remote}}, 0x5c) 19:36:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:19 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0xdb) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xe3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 1404.493848] usb usb3: usbfs: process 21353 (syz-executor.4) did not claim interface 0 before use [ 1404.591680] usb usb3: usbfs: process 21361 (syz-executor.4) did not claim interface 0 before use 19:36:19 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:20 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 19:36:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000240)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c0dfbcdb85e52cb5febb3516370dc4ab5a7bc625857a0f7e671e5152452c6ae5c2866248bdf86a7f9dd8ebc48a71d8830445c03010cabfd8de7e26"], &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)='.B\xf9b\xd0\x86\x85H1\xed\xd6\x16_U\x1c\xd31\xe9\x1a\xac\x89\xbfJ$\xad\xf2}\xc6E\xa9\x06\xbdzb\x90\x90\\L\x93\x9a:q[*i\xb7\xc6r\xa3\xa1P\xf4\xaf\xfe\xa8\xf1\x82U\xeb\xbe?\xb6x\x19\xb4!\xcd\x9c\xd2P\xc3\x91]\"\x92\xa3\xc3\xd9.l\x13?w\xe2j;\xe6\x06\xf637\x96\x87\x80\xad#f\xef\x04\x81\xc5\x1b\x06\xbb\x1f\x15:\v\x80\xf8\xdb\xab') mount(&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r4, 0xfd, &(0x7f0000000400)=""/126) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) set_thread_area(&(0x7f0000000040)={0x1, 0x20100000, 0x4000, 0x9, 0x7, 0xffffffffffff0000, 0x80000001, 0x401, 0x100000000, 0x40}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={r6, 0x3, 0x5f, 0x7}, &(0x7f0000000680)=0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) 19:36:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2300000022008152915a655267200000002ff90527bffb40ae3d2c2b7fa5afde28b285", 0x23}], 0x1}, 0x0) 19:36:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 19:36:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000880)="0adc1f023c123f3188a070") close(r0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2001100}, 0xc) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:36:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2300000022008152915a655267200000002ff90527bffb40ae3d2c2b7fa5afde28b285", 0x23}], 0x1}, 0x0) 19:36:21 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0xdb) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xe3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 19:36:21 executing program 2: io_setup(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000019c0)="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", 0xffc, 0x5, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/158, 0x9e}, {0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$mice(0x0, 0x0, 0x40000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00') fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000880)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x7}}, 0x20) 19:36:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xb) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0xf, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 19:36:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0x7f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 19:36:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2300000022008152915a655267200000002ff90527bffb40ae3d2c2b7fa5afde28b285", 0x23}], 0x1}, 0x0) 19:36:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0x7f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 19:36:23 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10020, 0x0) 19:36:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2300000022008152915a655267200000002ff90527bffb40ae3d2c2b7fa5afde28b285", 0x23}], 0x1}, 0x0) 19:36:23 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0xdb) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xe3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 19:36:23 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) bind$llc(r0, &(0x7f0000000100)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d00277156b, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 19:36:23 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0x7f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 19:36:24 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10020, 0x0) 19:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) bind$llc(r0, &(0x7f0000000100)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d00277156b, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 19:36:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0x7f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 19:36:24 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10020, 0x0) 19:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) bind$llc(r0, &(0x7f0000000100)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d00277156b, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 19:36:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:24 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0xdb) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xe3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 19:36:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) bind$llc(r0, &(0x7f0000000100)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d00277156b, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 19:36:25 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10020, 0x0) 19:36:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x88b6}, @val={0x0, 0x80, 0x8, 0x6, 0x0, 0xffffffc000000000}, @ipv4={{0x8, 0x4, 0x401, 0x126b9681, 0x7c, 0x0, 0x7, 0xffff, 0xff, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0xb, 0x800, [{0x0, 0x5, "661f55"}]}]}}, @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x200, "95ef1c", 0x0, "9898aa"}, "fdf139d390696ad407aa9445ea3efc7b8cb6239aefa57e1ada8e73cec4afbb40348b926b0f605ffb7befd2c24d252cf6dec1b39141c1ed94390dbac48815c17a8987d03de53a799220dec7d1"}}}, 0x8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a0") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000001c0)={0x101, 0x39, 0x401}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r4, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$caif_seqpacket(0x25, 0x5, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) connect$pppoe(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) semget(0x0, 0x0, 0x0) 19:36:26 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:26 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) [ 1411.057886] Unknown ioctl 19304 19:36:26 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getegid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) [ 1411.776154] Unknown ioctl 19304 19:36:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000440)=""/8, &(0x7f0000000640)=0x8) 19:36:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 19:36:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 19:36:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") shmdt(0x0) 19:36:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 19:36:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x88b6}, @val={0x0, 0x80, 0x8, 0x6, 0x0, 0xffffffc000000000}, @ipv4={{0x8, 0x4, 0x401, 0x126b9681, 0x7c, 0x0, 0x7, 0xffff, 0xff, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0xb, 0x800, [{0x0, 0x5, "661f55"}]}]}}, @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x200, "95ef1c", 0x0, "9898aa"}, "fdf139d390696ad407aa9445ea3efc7b8cb6239aefa57e1ada8e73cec4afbb40348b926b0f605ffb7befd2c24d252cf6dec1b39141c1ed94390dbac48815c17a8987d03de53a799220dec7d1"}}}, 0x8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a0") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000001c0)={0x101, 0x39, 0x401}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r4, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$caif_seqpacket(0x25, 0x5, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) connect$pppoe(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) semget(0x0, 0x0, 0x0) 19:36:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aea5, &(0x7f0000000080)) 19:36:28 executing program 5: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 1413.222802] Unknown ioctl 19304 19:36:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 19:36:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(&(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x0, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r0, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)={0x77359400}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0xb2, 0x2, 0x662, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x401, 0xaea, 0x4, 0x20, 0x9, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x1, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x4, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8}}, 0x28) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xbffd, @empty, 0x24a}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) 19:36:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0), 0x3b2, 0x0) 19:36:29 executing program 4: unshare(0x40600) r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x5}}, 0x0) 19:36:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 19:36:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x88b6}, @val={0x0, 0x80, 0x8, 0x6, 0x0, 0xffffffc000000000}, @ipv4={{0x8, 0x4, 0x401, 0x126b9681, 0x7c, 0x0, 0x7, 0xffff, 0xff, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0xb, 0x800, [{0x0, 0x5, "661f55"}]}]}}, @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x200, "95ef1c", 0x0, "9898aa"}, "fdf139d390696ad407aa9445ea3efc7b8cb6239aefa57e1ada8e73cec4afbb40348b926b0f605ffb7befd2c24d252cf6dec1b39141c1ed94390dbac48815c17a8987d03de53a799220dec7d1"}}}, 0x8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a0") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000001c0)={0x101, 0x39, 0x401}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r4, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$caif_seqpacket(0x25, 0x5, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) connect$pppoe(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) semget(0x0, 0x0, 0x0) 19:36:29 executing program 4: unshare(0x40600) r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x5}}, 0x0) 19:36:29 executing program 5: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x200000) read(r0, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sched_getscheduler(0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x6, 0x1}, 0x2}, 0x20, 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00ffffde050000eeaadc2107000000020000008ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000007c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000980)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a80)={0xa8, 0x0, &(0x7f00000009c0)=[@request_death={0x400c630e, 0x3, 0x4}, @enter_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000840)=[@flat={0x0, 0x100, r3, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000800), 0x1, 0x0, 0x6}], &(0x7f0000000880)=[0x28, 0x30, 0x78, 0x18, 0x18]}, 0xf7}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000900)=[@flat={0x73682a85, 0x101, r4, 0x3}], &(0x7f0000000940)=[0x38, 0x38, 0x28, 0x0, 0x0, 0x48, 0x0]}}], 0xd9, 0x0, &(0x7f0000000c00)="9a5296c6017bb91fed5409d8572923c8bb9a9cb0aa81cede49388c5efc0899bad8f7a5c5bc78551e1e3310e9ab56fb6811021bc2cb2683e1838cf3644c03b993196330b0ca4929fafa5a9bb0ce2fdee6ba006d462f1434c3a25307d24d412d4a2e58490a7d70097dc3005328832e7e4fcb41186c8a346480a9dda5588d9a3c6eedec26a7643bd6ab3690caf81444f3ca9f5212234177382cdfe7e8fa7f68c2f77acab18b461ca761701c9278d753e35ac88e270e9602eb8934e16ae5f80a6c83a93bb9d7eb5c0f85cd1577601fcfba178b8e48cb6000882f07"}) ioprio_set$uid(0x3, 0x0, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/227, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 1414.903665] Unknown ioctl 19304 19:36:30 executing program 4: unshare(0x40600) r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x5}}, 0x0) 19:36:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2\x89\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xdd\xff\x7f\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdfC\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-b\xca\xed\xf1i\x1a\\\xf4\x0fn\x0f\xe6JGd\xd1\xac\xf8\x8c\xc3DL4\xe3.\x89b\xcf7\xe6\f\xfek\xe9\x01\xdc\xce\x81&EU\x9cO\xde|s\bHsK\xca\v|\xd9\xbd\xe7\xbf\xd0\xccC\xa0;\x8c\x86{\xf2\xac\x97h\xfe$\xa6c\xea\x02\x11\x1e\xcf\x82\x87\x9b\b0\xaa\xb7\x9a\xe0v\xe1\xda\x92\xe1A\x80,/$\x8e\x93\xb4\xa6\xd9\x00\"\x93G\xc8\xd3\xb7\x9b\x0fqA\x0f%\xcb\"\xb8\x1e\xee\x1d\x9c\x87X\xfd5\xce\"\x83\xc6au\\#\xde\x11Wt\x80\x80\xe8\xde*\xa3\xc8\xb7\xb7\xe0\x0f\x1f:\xaa\xc2\xfd', 0x2761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdc3, &(0x7f0000000080)=""/251}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ys\xda<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xff\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-\x00\x00\x00\x00\x9b\x82\x11j<\x17Y\x1d0vjX\v\xab5p\x92\x16\xab\x97\xa7S\xd6\\y\xd5\xa4\xbbW\xaa}\xcf\xa0\xed\x1d\xa4\xa4\rG', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 19:36:30 executing program 4: unshare(0x40600) r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x5}}, 0x0) 19:36:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 19:36:31 executing program 5: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x88b6}, @val={0x0, 0x80, 0x8, 0x6, 0x0, 0xffffffc000000000}, @ipv4={{0x8, 0x4, 0x401, 0x126b9681, 0x7c, 0x0, 0x7, 0xffff, 0xff, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0xb, 0x800, [{0x0, 0x5, "661f55"}]}]}}, @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x200, "95ef1c", 0x0, "9898aa"}, "fdf139d390696ad407aa9445ea3efc7b8cb6239aefa57e1ada8e73cec4afbb40348b926b0f605ffb7befd2c24d252cf6dec1b39141c1ed94390dbac48815c17a8987d03de53a799220dec7d1"}}}, 0x8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a0") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000001c0)={0x101, 0x39, 0x401}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r4, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$caif_seqpacket(0x25, 0x5, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) connect$pppoe(r5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) semget(0x0, 0x0, 0x0) 19:36:31 executing program 4: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) [ 1416.367611] Unknown ioctl 19304 19:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x200000) read(r0, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sched_getscheduler(0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x6, 0x1}, 0x2}, 0x20, 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00ffffde050000eeaadc2107000000020000008ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000007c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000980)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a80)={0xa8, 0x0, &(0x7f00000009c0)=[@request_death={0x400c630e, 0x3, 0x4}, @enter_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000840)=[@flat={0x0, 0x100, r3, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000800), 0x1, 0x0, 0x6}], &(0x7f0000000880)=[0x28, 0x30, 0x78, 0x18, 0x18]}, 0xf7}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000900)=[@flat={0x73682a85, 0x101, r4, 0x3}], &(0x7f0000000940)=[0x38, 0x38, 0x28, 0x0, 0x0, 0x48, 0x0]}}], 0xd9, 0x0, &(0x7f0000000c00)="9a5296c6017bb91fed5409d8572923c8bb9a9cb0aa81cede49388c5efc0899bad8f7a5c5bc78551e1e3310e9ab56fb6811021bc2cb2683e1838cf3644c03b993196330b0ca4929fafa5a9bb0ce2fdee6ba006d462f1434c3a25307d24d412d4a2e58490a7d70097dc3005328832e7e4fcb41186c8a346480a9dda5588d9a3c6eedec26a7643bd6ab3690caf81444f3ca9f5212234177382cdfe7e8fa7f68c2f77acab18b461ca761701c9278d753e35ac88e270e9602eb8934e16ae5f80a6c83a93bb9d7eb5c0f85cd1577601fcfba178b8e48cb6000882f07"}) ioprio_set$uid(0x3, 0x0, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/227, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 19:36:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2\x89\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xdd\xff\x7f\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdfC\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-b\xca\xed\xf1i\x1a\\\xf4\x0fn\x0f\xe6JGd\xd1\xac\xf8\x8c\xc3DL4\xe3.\x89b\xcf7\xe6\f\xfek\xe9\x01\xdc\xce\x81&EU\x9cO\xde|s\bHsK\xca\v|\xd9\xbd\xe7\xbf\xd0\xccC\xa0;\x8c\x86{\xf2\xac\x97h\xfe$\xa6c\xea\x02\x11\x1e\xcf\x82\x87\x9b\b0\xaa\xb7\x9a\xe0v\xe1\xda\x92\xe1A\x80,/$\x8e\x93\xb4\xa6\xd9\x00\"\x93G\xc8\xd3\xb7\x9b\x0fqA\x0f%\xcb\"\xb8\x1e\xee\x1d\x9c\x87X\xfd5\xce\"\x83\xc6au\\#\xde\x11Wt\x80\x80\xe8\xde*\xa3\xc8\xb7\xb7\xe0\x0f\x1f:\xaa\xc2\xfd', 0x2761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdc3, &(0x7f0000000080)=""/251}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ys\xda<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xff\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-\x00\x00\x00\x00\x9b\x82\x11j<\x17Y\x1d0vjX\v\xab5p\x92\x16\xab\x97\xa7S\xd6\\y\xd5\xa4\xbbW\xaa}\xcf\xa0\xed\x1d\xa4\xa4\rG', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 19:36:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x90010000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x200000) read(r0, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sched_getscheduler(0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x6, 0x1}, 0x2}, 0x20, 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00ffffde050000eeaadc2107000000020000008ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000007c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000980)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a80)={0xa8, 0x0, &(0x7f00000009c0)=[@request_death={0x400c630e, 0x3, 0x4}, @enter_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000840)=[@flat={0x0, 0x100, r3, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000800), 0x1, 0x0, 0x6}], &(0x7f0000000880)=[0x28, 0x30, 0x78, 0x18, 0x18]}, 0xf7}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000900)=[@flat={0x73682a85, 0x101, r4, 0x3}], &(0x7f0000000940)=[0x38, 0x38, 0x28, 0x0, 0x0, 0x48, 0x0]}}], 0xd9, 0x0, &(0x7f0000000c00)="9a5296c6017bb91fed5409d8572923c8bb9a9cb0aa81cede49388c5efc0899bad8f7a5c5bc78551e1e3310e9ab56fb6811021bc2cb2683e1838cf3644c03b993196330b0ca4929fafa5a9bb0ce2fdee6ba006d462f1434c3a25307d24d412d4a2e58490a7d70097dc3005328832e7e4fcb41186c8a346480a9dda5588d9a3c6eedec26a7643bd6ab3690caf81444f3ca9f5212234177382cdfe7e8fa7f68c2f77acab18b461ca761701c9278d753e35ac88e270e9602eb8934e16ae5f80a6c83a93bb9d7eb5c0f85cd1577601fcfba178b8e48cb6000882f07"}) ioprio_set$uid(0x3, 0x0, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/227, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 19:36:32 executing program 5: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:32 executing program 4: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:32 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0xffffff93}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 19:36:32 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0xffffff93}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 19:36:33 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0xffffff93}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 19:36:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2\x89\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xdd\xff\x7f\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdfC\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-b\xca\xed\xf1i\x1a\\\xf4\x0fn\x0f\xe6JGd\xd1\xac\xf8\x8c\xc3DL4\xe3.\x89b\xcf7\xe6\f\xfek\xe9\x01\xdc\xce\x81&EU\x9cO\xde|s\bHsK\xca\v|\xd9\xbd\xe7\xbf\xd0\xccC\xa0;\x8c\x86{\xf2\xac\x97h\xfe$\xa6c\xea\x02\x11\x1e\xcf\x82\x87\x9b\b0\xaa\xb7\x9a\xe0v\xe1\xda\x92\xe1A\x80,/$\x8e\x93\xb4\xa6\xd9\x00\"\x93G\xc8\xd3\xb7\x9b\x0fqA\x0f%\xcb\"\xb8\x1e\xee\x1d\x9c\x87X\xfd5\xce\"\x83\xc6au\\#\xde\x11Wt\x80\x80\xe8\xde*\xa3\xc8\xb7\xb7\xe0\x0f\x1f:\xaa\xc2\xfd', 0x2761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdc3, &(0x7f0000000080)=""/251}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ys\xda<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xff\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-\x00\x00\x00\x00\x9b\x82\x11j<\x17Y\x1d0vjX\v\xab5p\x92\x16\xab\x97\xa7S\xd6\\y\xd5\xa4\xbbW\xaa}\xcf\xa0\xed\x1d\xa4\xa4\rG', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 19:36:33 executing program 5: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x90010000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:36:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x200000) read(r0, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sched_getscheduler(0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x6, 0x1}, 0x2}, 0x20, 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00ffffde050000eeaadc2107000000020000008ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000007c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000980)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a80)={0xa8, 0x0, &(0x7f00000009c0)=[@request_death={0x400c630e, 0x3, 0x4}, @enter_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000840)=[@flat={0x0, 0x100, r3, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000800), 0x1, 0x0, 0x6}], &(0x7f0000000880)=[0x28, 0x30, 0x78, 0x18, 0x18]}, 0xf7}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000900)=[@flat={0x73682a85, 0x101, r4, 0x3}], &(0x7f0000000940)=[0x38, 0x38, 0x28, 0x0, 0x0, 0x48, 0x0]}}], 0xd9, 0x0, &(0x7f0000000c00)="9a5296c6017bb91fed5409d8572923c8bb9a9cb0aa81cede49388c5efc0899bad8f7a5c5bc78551e1e3310e9ab56fb6811021bc2cb2683e1838cf3644c03b993196330b0ca4929fafa5a9bb0ce2fdee6ba006d462f1434c3a25307d24d412d4a2e58490a7d70097dc3005328832e7e4fcb41186c8a346480a9dda5588d9a3c6eedec26a7643bd6ab3690caf81444f3ca9f5212234177382cdfe7e8fa7f68c2f77acab18b461ca761701c9278d753e35ac88e270e9602eb8934e16ae5f80a6c83a93bb9d7eb5c0f85cd1577601fcfba178b8e48cb6000882f07"}) ioprio_set$uid(0x3, 0x0, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/227, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 19:36:33 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0xffffff93}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 19:36:33 executing program 4: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000008c0)) lstat(0x0, 0x0) getegid() getgroups(0x0, 0x0) r0 = gettid() pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) getitimer(0x0, &(0x7f0000000200)) utime(0x0, &(0x7f0000000180)={0x2}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:36:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) close(r0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000640)=ANY=[]) 19:36:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x90010000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:36:34 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@creator={'creator', 0x3d, "fae58307"}}, {@dir_umask={'dir_umask'}}]}) 19:36:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 19:36:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2\x89\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xdd\xff\x7f\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdfC\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-b\xca\xed\xf1i\x1a\\\xf4\x0fn\x0f\xe6JGd\xd1\xac\xf8\x8c\xc3DL4\xe3.\x89b\xcf7\xe6\f\xfek\xe9\x01\xdc\xce\x81&EU\x9cO\xde|s\bHsK\xca\v|\xd9\xbd\xe7\xbf\xd0\xccC\xa0;\x8c\x86{\xf2\xac\x97h\xfe$\xa6c\xea\x02\x11\x1e\xcf\x82\x87\x9b\b0\xaa\xb7\x9a\xe0v\xe1\xda\x92\xe1A\x80,/$\x8e\x93\xb4\xa6\xd9\x00\"\x93G\xc8\xd3\xb7\x9b\x0fqA\x0f%\xcb\"\xb8\x1e\xee\x1d\x9c\x87X\xfd5\xce\"\x83\xc6au\\#\xde\x11Wt\x80\x80\xe8\xde*\xa3\xc8\xb7\xb7\xe0\x0f\x1f:\xaa\xc2\xfd', 0x2761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdc3, &(0x7f0000000080)=""/251}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ys\xda<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xff\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-\x00\x00\x00\x00\x9b\x82\x11j<\x17Y\x1d0vjX\v\xab5p\x92\x16\xab\x97\xa7S\xd6\\y\xd5\xa4\xbbW\xaa}\xcf\xa0\xed\x1d\xa4\xa4\rG', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 19:36:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 19:36:34 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x2ea}, 0x435b) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 19:36:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 19:36:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:36:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 19:36:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x90010000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1419.770870] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1419.781268] CPU: 1 PID: 21892 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1419.788675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.798057] Call Trace: [ 1419.800691] dump_stack+0x172/0x1f0 [ 1419.804365] dump_header+0x10f/0xb6c [ 1419.808136] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1419.813304] ? ___ratelimit+0x60/0x595 [ 1419.817231] ? do_raw_spin_unlock+0x57/0x270 [ 1419.821689] oom_kill_process.cold+0x10/0x6f5 [ 1419.826237] ? task_will_free_mem+0x139/0x6e0 [ 1419.830792] ? out_of_memory+0x9a/0x1280 [ 1419.834906] out_of_memory+0x79a/0x1280 [ 1419.838929] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1419.844079] ? oom_killer_disable+0x280/0x280 [ 1419.848627] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1419.853786] mem_cgroup_out_of_memory+0x99/0xe0 [ 1419.858498] ? memcg_memory_event+0x40/0x40 [ 1419.862874] ? _raw_spin_unlock+0x2d/0x50 [ 1419.867060] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1419.872201] try_charge+0xfec/0x1570 [ 1419.875947] ? find_held_lock+0x35/0x130 [ 1419.880051] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1419.884940] ? kasan_check_read+0x11/0x20 [ 1419.889159] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1419.894049] mem_cgroup_try_charge+0x24d/0x5e0 [ 1419.898682] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1419.903663] __handle_mm_fault+0x1e26/0x3f20 [ 1419.908136] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1419.913024] ? find_held_lock+0x35/0x130 [ 1419.917150] ? handle_mm_fault+0x322/0xb30 [ 1419.921452] ? kasan_check_read+0x11/0x20 [ 1419.925650] handle_mm_fault+0x43f/0xb30 [ 1419.929761] __get_user_pages+0x7b6/0x1a40 [ 1419.934037] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1419.939031] ? follow_page_mask+0x19a0/0x19a0 [ 1419.943598] populate_vma_page_range+0x20d/0x2a0 [ 1419.948442] __mm_populate+0x204/0x380 [ 1419.952384] ? populate_vma_page_range+0x2a0/0x2a0 [ 1419.957379] ? userfaultfd_unmap_complete+0x293/0x400 [ 1419.962617] ? vm_mmap_pgoff+0x1e7/0x230 [ 1419.966735] vm_mmap_pgoff+0x213/0x230 19:36:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 19:36:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000e9bd0fdf333f260005001a00d504025a000540ecaddc0918b2a4e70140ff84000000e312340fa30049cb000000000013"], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x2f9, 0x0) [ 1419.970683] ? vma_is_stack_for_current+0xd0/0xd0 [ 1419.975579] ? kasan_check_read+0x11/0x20 [ 1419.979773] ? _copy_to_user+0xc9/0x120 [ 1419.983800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1419.989387] ksys_mmap_pgoff+0xf7/0x630 [ 1419.993411] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1419.998392] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1420.003197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1420.007968] ? do_syscall_64+0x26/0x610 [ 1420.011970] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1420.017365] __x64_sys_mmap+0xe9/0x1b0 [ 1420.021296] do_syscall_64+0x103/0x610 [ 1420.025212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1420.030414] RIP: 0033:0x457e29 [ 1420.033616] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1420.052548] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1420.060284] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 19:36:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) dup2(r0, r2) [ 1420.067575] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 1420.074881] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1420.082166] R10: 0800000000008032 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1420.089474] R13: 00000000004c3b88 R14: 00000000004d6ca0 R15: 00000000ffffffff [ 1420.097193] memory: usage 30720kB, limit 30720kB, failcnt 550 [ 1420.256911] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:36:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 19:36:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 1420.318028] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1420.329116] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1420.337319] Memory cgroup stats for /syz4: cache:0KB rss:21152KB rss_huge:18432KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21280KB inactive_file:4KB active_file:8KB unevictable:0KB [ 1420.360982] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20708,uid=0 [ 1420.382736] Memory cgroup out of memory: Kill process 20708 (syz-executor.4) score 2153 or sacrifice child [ 1420.407920] Killed process 20708 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35824kB, shmem-rss:0kB 19:36:35 executing program 0: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000e9bd0fdf333f260005001a00d504025a000540ecaddc0918b2a4e70140ff84000000e312340fa30049cb000000000013"], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x2f9, 0x0) [ 1420.433128] oom_reaper: reaped process 20708 (syz-executor.4), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 1420.709493] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1420.722709] CPU: 1 PID: 21892 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1420.730037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.739408] Call Trace: [ 1420.742021] dump_stack+0x172/0x1f0 [ 1420.745689] dump_header+0x10f/0xb6c [ 1420.749439] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1420.754579] ? ___ratelimit+0x60/0x595 [ 1420.758500] ? do_raw_spin_unlock+0x57/0x270 [ 1420.762940] oom_kill_process.cold+0x10/0x6f5 [ 1420.767469] ? task_will_free_mem+0x139/0x6e0 [ 1420.772009] ? debug_smp_processor_id+0x1c/0x20 [ 1420.776736] out_of_memory+0x79a/0x1280 [ 1420.780750] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1420.785923] ? oom_killer_disable+0x280/0x280 [ 1420.790450] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1420.795605] mem_cgroup_out_of_memory+0x99/0xe0 [ 1420.800337] ? memcg_memory_event+0x40/0x40 [ 1420.804700] ? _raw_spin_unlock+0x2d/0x50 [ 1420.808872] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1420.813990] try_charge+0xfec/0x1570 [ 1420.817713] ? find_held_lock+0x35/0x130 [ 1420.821810] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1420.826676] ? kasan_check_read+0x11/0x20 [ 1420.830860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1420.835756] mem_cgroup_try_charge+0x24d/0x5e0 [ 1420.840354] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1420.845323] __handle_mm_fault+0x1e26/0x3f20 [ 1420.849749] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1420.854599] ? find_held_lock+0x35/0x130 [ 1420.858687] ? handle_mm_fault+0x322/0xb30 [ 1420.862958] ? kasan_check_read+0x11/0x20 [ 1420.867134] handle_mm_fault+0x43f/0xb30 [ 1420.871209] __get_user_pages+0x7b6/0x1a40 [ 1420.875460] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1420.880407] ? follow_page_mask+0x19a0/0x19a0 [ 1420.884942] populate_vma_page_range+0x20d/0x2a0 [ 1420.889714] __mm_populate+0x204/0x380 [ 1420.893614] ? populate_vma_page_range+0x2a0/0x2a0 [ 1420.898561] ? userfaultfd_unmap_complete+0x293/0x400 [ 1420.903769] ? vm_mmap_pgoff+0x1e7/0x230 [ 1420.907848] vm_mmap_pgoff+0x213/0x230 [ 1420.911756] ? vma_is_stack_for_current+0xd0/0xd0 [ 1420.916613] ? kasan_check_read+0x11/0x20 [ 1420.920794] ? _copy_to_user+0xc9/0x120 [ 1420.924781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1420.930331] ksys_mmap_pgoff+0xf7/0x630 [ 1420.934336] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1420.939283] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1420.944049] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1420.948833] ? do_syscall_64+0x26/0x610 [ 1420.952831] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1420.958220] __x64_sys_mmap+0xe9/0x1b0 [ 1420.962135] do_syscall_64+0x103/0x610 [ 1420.966055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1420.971261] RIP: 0033:0x457e29 [ 1420.974455] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1420.993374] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1421.001103] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 1421.008389] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 1421.015674] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1421.022967] R10: 0800000000008032 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1421.030241] R13: 00000000004c3b88 R14: 00000000004d6ca0 R15: 00000000ffffffff [ 1421.044661] memory: usage 30720kB, limit 30720kB, failcnt 564 19:36:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x4, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x800000000008c, 0x1, 0x0, &(0x7f0000000080), 0x0) 19:36:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000580)=[{r0, 0x8014}, {r1, 0x200}, {r2}, {r3, 0x8000}, {r4, 0x148}, {r5, 0x8}], 0x6, 0x383) r6 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x1ff2, 0x8, 0x6, 0x8, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = memfd_create(&(0x7f0000000380)='fdin\x1f\xa2/3\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="0de076c40ed8c85e6ae59b5c04ec09532228695186ac9b394578008833d761b9dad791283a657f47") preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value, 0x0) r9 = creat(&(0x7f0000000340)='./bus\x00', 0x100) mkdirat(r9, &(0x7f0000000140)='./bus\x00', 0x80) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r10, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[@ANYBLOB="2c6163636573733d636c69656e742c66736e6100653d6664696e1fa22f1c002c00b517d8572d3b177467ed3a8c2f4ae4ecd9668b2bf25e600eae4a772177639e234d3064a40796ba26bfacda4564c2aed22b13bbc0be39"]) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x80) ioctl$TIOCSCTTY(r9, 0x540e, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) [ 1421.249419] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1421.260876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1421.267678] Memory cgroup stats for /syz4: cache:0KB rss:21332KB rss_huge:16384KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21440KB inactive_file:4KB active_file:8KB unevictable:0KB [ 1421.288743] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21887,uid=0 [ 1421.316489] Memory cgroup out of memory: Kill process 21887 (syz-executor.4) score 2217 or sacrifice child [ 1421.341670] Killed process 21887 (syz-executor.4) total-vm:72448kB, anon-rss:5040kB, file-rss:34944kB, shmem-rss:0kB [ 1421.396634] oom_reaper: reaped process 21887 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 1421.536707] audit: type=1804 audit(1550691396.744:586): pid=21931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir659191508/syzkaller.WFPJvT/664/bus" dev="sda1" ino=16628 res=1 19:36:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)='!', 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write(r0, &(0x7f0000000340)='R', 0x1) sendfile(r2, r1, 0x0, 0x462c) 19:36:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000e9bd0fdf333f260005001a00d504025a000540ecaddc0918b2a4e70140ff84000000e312340fa30049cb000000000013"], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x2f9, 0x0) 19:36:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 19:36:36 executing program 2: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f0000000440)={'bond0\x00', @ifru_addrs=@can}) [ 1421.769634] audit: type=1804 audit(1550691397.014:587): pid=21934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir659191508/syzkaller.WFPJvT/664/bus" dev="sda1" ino=16628 res=1 [ 1421.871354] audit: type=1804 audit(1550691397.024:588): pid=21934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir659191508/syzkaller.WFPJvT/664/bus" dev="sda1" ino=16628 res=1 19:36:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x480040) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) listen(r1, 0x20000000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @remote}, &(0x7f0000000100)=0xffffffffffffffde) r2 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000200)) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x2b3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0xf401000000000500}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000280)) 19:36:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000e9bd0fdf333f260005001a00d504025a000540ecaddc0918b2a4e70140ff84000000e312340fa30049cb000000000013"], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x2f9, 0x0) 19:36:37 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioperm(0xa477, 0xd0f, 0x4) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xef, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000740)=""/186) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[]}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x0) 19:36:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9000008912, &(0x7f0000000180)="0af51f023c123f3188a070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x4000000000000}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xdf, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) r4 = getpgrp(0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) syz_read_part_table(0x0, 0x0, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 1421.982738] audit: type=1804 audit(1550691397.024:589): pid=21933 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir659191508/syzkaller.WFPJvT/664/bus" dev="sda1" ino=16628 res=1 19:36:37 executing program 0: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:37 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) 19:36:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000580)=[{r0, 0x8014}, {r1, 0x200}, {r2}, {r3, 0x8000}, {r4, 0x148}, {r5, 0x8}], 0x6, 0x383) r6 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x1ff2, 0x8, 0x6, 0x8, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = memfd_create(&(0x7f0000000380)='fdin\x1f\xa2/3\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="0de076c40ed8c85e6ae59b5c04ec09532228695186ac9b394578008833d761b9dad791283a657f47") preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value, 0x0) r9 = creat(&(0x7f0000000340)='./bus\x00', 0x100) mkdirat(r9, &(0x7f0000000140)='./bus\x00', 0x80) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r10, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[@ANYBLOB="2c6163636573733d636c69656e742c66736e6100653d6664696e1fa22f1c002c00b517d8572d3b177467ed3a8c2f4ae4ecd9668b2bf25e600eae4a772177639e234d3064a40796ba26bfacda4564c2aed22b13bbc0be39"]) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x80) ioctl$TIOCSCTTY(r9, 0x540e, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) 19:36:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x480040) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) listen(r1, 0x20000000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @remote}, &(0x7f0000000100)=0xffffffffffffffde) r2 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000200)) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x2b3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0xf401000000000500}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000280)) 19:36:38 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) 19:36:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x480040) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) listen(r1, 0x20000000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @remote}, &(0x7f0000000100)=0xffffffffffffffde) r2 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000200)) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x2b3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0xf401000000000500}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000280)) [ 1423.050424] __loop_clr_fd: partition scan of loop2 failed (rc=-22) 19:36:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000580)=[{r0, 0x8014}, {r1, 0x200}, {r2}, {r3, 0x8000}, {r4, 0x148}, {r5, 0x8}], 0x6, 0x383) r6 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x1ff2, 0x8, 0x6, 0x8, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = memfd_create(&(0x7f0000000380)='fdin\x1f\xa2/3\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="0de076c40ed8c85e6ae59b5c04ec09532228695186ac9b394578008833d761b9dad791283a657f47") preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value, 0x0) r9 = creat(&(0x7f0000000340)='./bus\x00', 0x100) mkdirat(r9, &(0x7f0000000140)='./bus\x00', 0x80) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r10, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[@ANYBLOB="2c6163636573733d636c69656e742c66736e6100653d6664696e1fa22f1c002c00b517d8572d3b177467ed3a8c2f4ae4ecd9668b2bf25e600eae4a772177639e234d3064a40796ba26bfacda4564c2aed22b13bbc0be39"]) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x80) ioctl$TIOCSCTTY(r9, 0x540e, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) 19:36:38 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioperm(0xa477, 0xd0f, 0x4) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xef, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fstat(0xffffffffffffffff, &(0x7f0000000340)) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000740)=""/186) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[]}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x0) 19:36:38 executing program 0: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 19:36:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f0000000580)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\xba\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\xc2\xed0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f0000000580)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\xba\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff"], 0x7) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 19:36:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x0, r2}) 19:36:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:42 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x18, r0, 0x2, &(0x7f0000000280)={0x0, 0x100}) 19:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x0, r2}) 19:36:42 executing program 2: clone(0x10004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x800000012, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffff3}) 19:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x0, r2}) 19:36:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x06\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86\xbbV,v8y\x9b\x93\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd5\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00]p\x9cFf\xadv\xf8\x8a\xb4jT)\xc8\xb7\xa73?\x1c\x93w\xc67j=\xb1\xc0\xe8\x19\xcc\x84\x87\xf3\xb4\x14\x96\xec!\x17h\n\xf9\xb2\x12T+\xdc\xa6\xe9\"v*\x9e\xb8\x8c\x90}\x9c\xc9\xda\xe5\x18W5\r\xc2\xdb5P1\xc7\x1e|\xc1\xbb\xf4\x1a\xbe1\xca!+1`|h\xa8\xd8\'\xc6\xac\x16\xc4\xc6JuM\x98T\x8d+;\x16\xc5\xe9v\xae\'\x92\xbf\x1f\x17\xb8\x9ax\x8b\xbb\xf1\xc8)\xc5$\xf1M\x98\xb0\x1aP\x043\xc3\xe6\x9e\x87\x89\xebp,\x1di\x12\xf2\fj\xaf\xa6g\x00\xcfY\xf6S\xa3\xf8\x9b\x1d\xba\x1au\xa6\x1c\xae\r\xa9\xe1i)\xd2\xb0\x8f\x1b?wCX\x0f\x99S\xfaA\x13\xbd\xcb\xed\"\xba\xda\xa2\xd1\xefc#\xfd5\xfc\xf3k\xaa\x83+\x83\xc5\x1b\xa7\x82\xe3\xdb\xf2\xfb4B\x19\xf2', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) 19:36:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:43 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x18, r0, 0x2, &(0x7f0000000280)={0x0, 0x100}) 19:36:43 executing program 2: clone(0x10004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x800000012, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffff3}) 19:36:43 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001200)) clock_settime(0x0, &(0x7f0000000040)={r1}) 19:36:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0505405, &(0x7f00000000c0)) r4 = dup3(r2, r3, 0x0) dup3(r4, r1, 0x0) [ 1428.516392] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1428.545126] CPU: 1 PID: 22167 Comm: syz-executor.4 Not tainted 5.0.0-rc7+ #80 [ 1428.552501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.561894] Call Trace: [ 1428.564525] dump_stack+0x172/0x1f0 [ 1428.568200] dump_header+0x10f/0xb6c [ 1428.571954] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1428.577110] ? ___ratelimit+0x60/0x595 [ 1428.581037] ? do_raw_spin_unlock+0x57/0x270 [ 1428.586088] oom_kill_process.cold+0x10/0x6f5 [ 1428.590654] ? oom_badness+0x6c0/0x6c0 [ 1428.594588] out_of_memory+0x79a/0x1280 [ 1428.598596] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1428.603745] ? oom_killer_disable+0x280/0x280 [ 1428.608289] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1428.613457] mem_cgroup_out_of_memory+0x99/0xe0 [ 1428.618181] ? memcg_memory_event+0x40/0x40 [ 1428.622557] ? _raw_spin_unlock+0x2d/0x50 [ 1428.626741] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1428.631876] try_charge+0xfec/0x1570 [ 1428.635612] ? find_held_lock+0x35/0x130 [ 1428.639688] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1428.644566] ? kasan_check_read+0x11/0x20 [ 1428.648737] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1428.653583] mem_cgroup_try_charge+0x24d/0x5e0 [ 1428.658169] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1428.663106] shmem_getpage_gfp+0x69b/0x3520 [ 1428.667474] ? shmem_add_to_page_cache+0x1200/0x1200 [ 1428.672590] ? perf_trace_lock_acquire+0xf5/0x580 [ 1428.677458] ? __lock_acquire+0x53b/0x4700 [ 1428.681719] shmem_fault+0x22d/0x760 [ 1428.685439] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 1428.690731] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1428.695507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1428.700261] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1428.704839] ? retint_kernel+0x2d/0x2d [ 1428.708735] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1428.713663] ? pmd_val+0x85/0x100 [ 1428.717126] shm_fault+0xc2/0x100 [ 1428.720600] __do_fault+0x116/0x4e0 [ 1428.724259] __handle_mm_fault+0x2cbd/0x3f20 [ 1428.728676] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1428.733522] ? find_held_lock+0x35/0x130 [ 1428.737579] ? handle_mm_fault+0x322/0xb30 [ 1428.741819] ? rcu_read_unlock_special+0xf3/0x210 [ 1428.746664] handle_mm_fault+0x43f/0xb30 [ 1428.750741] __get_user_pages+0x7b6/0x1a40 [ 1428.755001] ? follow_page_mask+0x19a0/0x19a0 [ 1428.759511] ? retint_kernel+0x2d/0x2d [ 1428.763417] ? populate_vma_page_range+0xcf/0x2a0 [ 1428.768295] populate_vma_page_range+0x20d/0x2a0 [ 1428.773078] __mm_populate+0x204/0x380 [ 1428.776977] ? populate_vma_page_range+0x2a0/0x2a0 [ 1428.781938] do_shmat+0xd50/0x1090 [ 1428.785525] ? __x32_compat_sys_shmctl+0xb0/0xb0 [ 1428.790293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1428.795077] __x64_sys_shmat+0xd1/0x170 [ 1428.799051] ? do_shmat+0x1090/0x1090 [ 1428.802855] ? do_syscall_64+0x54/0x610 [ 1428.806829] do_syscall_64+0x103/0x610 [ 1428.810731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1428.815956] RIP: 0033:0x457e29 [ 1428.819160] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1428.838073] RSP: 002b:00007f4d33f80c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1428.845830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1428.853121] RDX: 0000000000004000 RSI: 0000000020000000 RDI: 0000000000040008 [ 1428.860406] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:36:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:43 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x18, r0, 0x2, &(0x7f0000000280)={0x0, 0x100}) 19:36:43 executing program 2: clone(0x10004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x800000012, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffff3}) [ 1428.867674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d33f816d4 [ 1428.874943] R13: 00000000004c601a R14: 00000000004db0e0 R15: 00000000ffffffff [ 1428.901189] memory: usage 30720kB, limit 30720kB, failcnt 598 [ 1428.907277] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1428.979958] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1429.012063] Memory cgroup stats for /syz4: cache:5016KB rss:16260KB rss_huge:14336KB shmem:5088KB mapped_file:1452KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:20088KB inactive_file:0KB active_file:0KB unevictable:1412KB [ 1429.088566] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14042,uid=0 [ 1429.113661] Memory cgroup out of memory: Kill process 14042 (syz-executor.4) score 2120 or sacrifice child [ 1429.134351] Killed process 14042 (syz-executor.4) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1429.161212] oom_reaper: reaped process 14042 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 19:36:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r0, &(0x7f0000000480), 0x100000000000013f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) close(0xffffffffffffffff) [ 1429.472795] [ 1429.474482] ====================================================== [ 1429.480802] WARNING: possible circular locking dependency detected [ 1429.487136] 5.0.0-rc7+ #80 Not tainted [ 1429.491022] ------------------------------------------------------ [ 1429.497336] syz-executor.0/22219 is trying to acquire lock: [ 1429.503070] 00000000b21155e6 (&sig->cred_guard_mutex){+.+.}, at: lock_trace+0x4a/0xe0 [ 1429.511103] [ 1429.511103] but task is already holding lock: [ 1429.517122] 00000000a2481ce8 (&p->lock){+.+.}, at: seq_read+0x71/0x1130 [ 1429.523909] [ 1429.523909] which lock already depends on the new lock. [ 1429.523909] [ 1429.532232] [ 1429.532232] the existing dependency chain (in reverse order) is: [ 1429.539843] [ 1429.539843] -> #3 (&p->lock){+.+.}: [ 1429.544968] __mutex_lock+0xf7/0x1310 [ 1429.549293] mutex_lock_nested+0x16/0x20 [ 1429.553883] seq_read+0x71/0x1130 [ 1429.557863] do_iter_read+0x4a9/0x660 [ 1429.562188] vfs_readv+0xf0/0x160 [ 1429.566167] default_file_splice_read+0x475/0x890 [ 1429.571559] do_splice_to+0x12a/0x190 [ 1429.575885] splice_direct_to_actor+0x2d2/0x970 [ 1429.581080] do_splice_direct+0x1da/0x2a0 [ 1429.585772] do_sendfile+0x597/0xd00 [ 1429.590009] __x64_sys_sendfile64+0x1dd/0x220 [ 1429.595043] do_syscall_64+0x103/0x610 [ 1429.599456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1429.605160] [ 1429.605160] -> #2 (sb_writers#3){.+.+}: [ 1429.610632] __sb_start_write+0x20b/0x360 [ 1429.615304] mnt_want_write+0x3f/0xc0 [ 1429.619636] ovl_want_write+0x76/0xa0 [ 1429.623959] ovl_create_object+0xb3/0x2c0 [ 1429.628637] ovl_create+0x28/0x30 [ 1429.632633] lookup_open+0x12e0/0x1b10 [ 1429.637056] path_openat+0x149a/0x4690 [ 1429.641471] do_filp_open+0x1a1/0x280 [ 1429.645796] do_sys_open+0x3fe/0x5d0 [ 1429.650031] __x64_sys_creat+0x61/0x80 [ 1429.654444] do_syscall_64+0x103/0x610 [ 1429.658860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1429.664565] [ 1429.664565] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}: [ 1429.671335] down_read+0x3b/0x90 [ 1429.675232] path_openat+0x1e79/0x4690 [ 1429.679659] do_filp_open+0x1a1/0x280 [ 1429.683986] do_open_execat+0x13b/0x6d0 [ 1429.688488] __do_execve_file.isra.0+0x178d/0x23f0 [ 1429.693945] __x64_sys_execveat+0xed/0x130 [ 1429.698704] do_syscall_64+0x103/0x610 [ 1429.703138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1429.708839] [ 1429.708839] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 1429.715193] lock_acquire+0x16f/0x3f0 [ 1429.720033] __mutex_lock+0xf7/0x1310 [ 1429.724388] mutex_lock_killable_nested+0x16/0x20 [ 1429.729785] lock_trace+0x4a/0xe0 [ 1429.733759] proc_pid_stack+0x13e/0x2c0 [ 1429.738253] proc_single_show+0xf6/0x180 [ 1429.742842] seq_read+0x4db/0x1130 [ 1429.746905] do_iter_read+0x4a9/0x660 [ 1429.751227] vfs_readv+0xf0/0x160 [ 1429.755200] do_preadv+0x1c4/0x280 [ 1429.759264] __x64_sys_preadv+0x9a/0xf0 [ 1429.763762] do_syscall_64+0x103/0x610 [ 1429.768173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1429.773873] [ 1429.773873] other info that might help us debug this: [ 1429.773873] [ 1429.782005] Chain exists of: [ 1429.782005] &sig->cred_guard_mutex --> sb_writers#3 --> &p->lock [ 1429.782005] [ 1429.792677] Possible unsafe locking scenario: [ 1429.792677] [ 1429.798730] CPU0 CPU1 [ 1429.803391] ---- ---- [ 1429.808052] lock(&p->lock); [ 1429.811159] lock(sb_writers#3); [ 1429.817139] lock(&p->lock); [ 1429.822758] lock(&sig->cred_guard_mutex); [ 1429.827077] [ 1429.827077] *** DEADLOCK *** [ 1429.827077] [ 1429.833161] 1 lock held by syz-executor.0/22219: [ 1429.837906] #0: 00000000a2481ce8 (&p->lock){+.+.}, at: seq_read+0x71/0x1130 [ 1429.845127] [ 1429.845127] stack backtrace: [ 1429.849661] CPU: 1 PID: 22219 Comm: syz-executor.0 Not tainted 5.0.0-rc7+ #80 [ 1429.856960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.866314] Call Trace: [ 1429.868916] dump_stack+0x172/0x1f0 [ 1429.872557] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1429.877929] __lock_acquire+0x2f00/0x4700 [ 1429.882084] ? mark_held_locks+0xb1/0x100 [ 1429.886255] ? mark_held_locks+0x100/0x100 [ 1429.890502] ? __lock_is_held+0xb6/0x140 [ 1429.894570] ? proc_single_show+0xf6/0x180 [ 1429.898822] ? lock_trace+0x4a/0xe0 [ 1429.902452] lock_acquire+0x16f/0x3f0 [ 1429.906257] ? lock_trace+0x4a/0xe0 [ 1429.909894] ? lock_trace+0x4a/0xe0 [ 1429.913530] __mutex_lock+0xf7/0x1310 [ 1429.917336] ? lock_trace+0x4a/0xe0 [ 1429.920971] ? lock_trace+0x4a/0xe0 19:36:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8081, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) mlockall(0x2) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000b17000/0x3000)=nil, &(0x7f00000001c0)) ioctl(r1, 0x2, &(0x7f0000000000)="fb5290e9108c57b1908d58ab51290742227e62e972e40f4eb1a45b0f5203582e258e87449b7a2b39ad70ba7eed6b57cee2432f1cf5973e94dc6baca664fc09c3c30659979cc71f4a637128272121943156deed1b167c500c9b0174f018799ed28c826245af8ae90987") r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xffffffffffffffff]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r6, r7, r8}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x401, @remote, 0x1}, {0xa, 0x4e21, 0x6}, r5, 0x7ff}}, 0x48) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffff9, [0x100000000, 0x1ffe00, 0x7, 0x2, 0x4676, 0x40, 0x6, 0x5, 0x3f8, 0x40, 0x82, 0x401, 0x40d8, 0x3, 0x8, 0x8, 0x6, 0x20, 0xf9a9, 0x3, 0x46, 0x7, 0x4, 0xffffffff, 0x800, 0x3, 0x7, 0x5, 0x4, 0x0, 0xcd, 0x401, 0x9, 0x81, 0x100000001, 0x8, 0x5, 0xffffffffffffffff, 0xfff, 0x7ff, 0x7, 0x0, 0x1, 0x7, 0x44, 0x1, 0x2, 0x81], 0xb}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 19:36:44 executing program 2: clone(0x10004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x800000012, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffff3}) [ 1429.924604] ? should_fail+0x14d/0x85c [ 1429.928506] ? mutex_trylock+0x1e0/0x1e0 [ 1429.932571] ? __lock_is_held+0xb6/0x140 [ 1429.936650] ? check_preemption_disabled+0x48/0x290 [ 1429.941676] ? proc_pid_stack+0x107/0x2c0 [ 1429.945833] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1429.951290] ? rcu_read_lock_sched_held+0x110/0x130 [ 1429.956314] mutex_lock_killable_nested+0x16/0x20 [ 1429.961169] ? mutex_lock_killable_nested+0x16/0x20 [ 1429.966173] lock_trace+0x4a/0xe0 [ 1429.969610] proc_pid_stack+0x13e/0x2c0 [ 1429.973573] ? dname_to_vma_addr.isra.0+0x3a0/0x3a0 [ 1429.978596] ? kasan_check_read+0x11/0x20 [ 1429.982730] proc_single_show+0xf6/0x180 [ 1429.986802] seq_read+0x4db/0x1130 [ 1429.990335] do_iter_read+0x4a9/0x660 [ 1429.994157] ? dup_iter+0x260/0x260 [ 1429.997772] vfs_readv+0xf0/0x160 [ 1430.001209] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1430.006559] ? kasan_check_read+0x11/0x20 [ 1430.010692] ? __fget+0x367/0x540 [ 1430.014144] ? iterate_fd+0x360/0x360 [ 1430.017935] ? kasan_check_read+0x11/0x20 [ 1430.022067] ? _copy_to_user+0xc9/0x120 [ 1430.026026] ? __fget_light+0x1a9/0x230 [ 1430.029987] do_preadv+0x1c4/0x280 [ 1430.033526] ? do_readv+0x290/0x290 [ 1430.037154] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1430.041912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1430.046650] ? do_syscall_64+0x26/0x610 [ 1430.050608] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1430.055972] ? do_syscall_64+0x26/0x610 [ 1430.059942] __x64_sys_preadv+0x9a/0xf0 [ 1430.063920] do_syscall_64+0x103/0x610 [ 1430.067817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1430.072991] RIP: 0033:0x457e29 [ 1430.076172] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1430.095065] RSP: 002b:00007f98e45cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1430.102779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1430.110040] RDX: 100000000000013f RSI: 0000000020000480 RDI: 0000000000000006 [ 1430.117303] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 19:36:44 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 19:36:44 executing program 3: socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f0000000580)) socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000002c0)="ab8da6293f0c10505cff55c10a865a59bc13585be78c74b628b137b465", 0x1d}], 0x1, &(0x7f0000003f40)=ANY=[]}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, &(0x7f00000002c0)={r0}) [ 1430.124568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98e45cb6d4 [ 1430.131828] R13: 00000000004c4933 R14: 00000000004d8170 R15: 00000000ffffffff [ 1430.166141] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1430.177166] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 1430.252221] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1430.286651] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 19:36:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = dup(r0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2}) [ 1430.287990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1430.315242] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1430.344765] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1430.378781] base_sock_release(00000000508119af) sk=000000001af3ccc0 19:36:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 1430.397682] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1430.402407] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1430.428932] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1430.429665] base_sock_release(0000000052e4d6dc) sk=0000000083bfdc96 [ 1430.459014] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1430.486066] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' 19:36:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 1430.534984] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env 19:36:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 19:36:45 executing program 3: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) [ 1430.578595] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1430.641512] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1430.666846] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1430.687994] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1430.698167] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1430.719567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:36:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 1430.746166] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1430.758139] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1430.913690] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1430.920261] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 19:36:45 executing program 3: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) 19:36:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1431.065365] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1431.085882] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1431.119571] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1431.142845] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' 19:36:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 19:36:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) 19:36:46 executing program 0: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) 19:36:46 executing program 3: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) [ 1431.226034] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1431.254062] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1431.285091] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1431.300260] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) [ 1431.344990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:36:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, 0x1d, 0x2000000000001, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 19:36:46 executing program 0: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) [ 1431.391279] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1431.397769] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' 19:36:46 executing program 3: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) [ 1431.461553] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1431.481853] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1431.561432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1431.565107] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env 19:36:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) [ 1431.634089] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' 19:36:46 executing program 0: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) [ 1431.713563] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1431.769922] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1431.862047] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1431.879840] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1431.932710] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1431.939721] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1431.956526] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1431.964024] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1431.994907] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1432.004086] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1432.027336] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env 19:36:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1432.047964] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1432.121081] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1432.127756] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' 19:36:47 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) 19:36:47 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) 19:36:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1432.279646] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1432.294635] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) 19:36:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1432.386697] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1432.403169] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1432.481504] kobject: 'loop2' (000000001d92c684): kobject_uevent_env 19:36:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0xb320) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, 0x8) [ 1432.526929] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1432.598342] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1432.655920] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' 19:36:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1432.822967] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1432.838977] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' 19:36:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:47 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1433.107812] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1433.122401] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1433.159606] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1433.184845] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1433.209850] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env 19:36:48 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1433.259432] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1433.297203] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1433.353197] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1433.481345] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1433.487834] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1433.669844] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1433.687471] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' 19:36:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1433.924937] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1433.936387] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' 19:36:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) [ 1434.061335] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1434.074822] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' 19:36:48 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) 19:36:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1434.179308] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1434.204975] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1434.276817] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env 19:36:49 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1434.325894] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1434.410462] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1434.467693] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) [ 1434.638978] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1434.652841] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' 19:36:49 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1434.864159] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 1434.953250] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1434.967205] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) 19:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) [ 1435.122848] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1435.144387] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1435.233086] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1435.258024] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' 19:36:50 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) close(r4) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0xca) 19:36:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004002}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x0, 0x7, 0x1, 0xa915, 0x0, 0x0, 0x8, 0x3}, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) fstat(r1, &(0x7f0000000380)) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c}]) [ 1435.278546] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env 19:36:50 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$setownex(r2, 0xf, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x235) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000001300)=0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000012c0)=0xfffffffd, 0xfffffffffffffc45) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = open(&(0x7f0000000200)='./bus\x00', 0x10000141042, 0x0) getuid() pread64(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2100) [ 1435.310044] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1435.333712] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1435.341919] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1435.371669] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1435.393842] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1435.431097] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 1435.465555] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1435.487604] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' 19:36:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = getpgid(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) sched_setscheduler(r2, 0x0, 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000002c0)) uselib(0x0) 19:36:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) 19:36:50 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) close(r4) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0xca) 19:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) [ 1435.562641] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1435.579133] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1435.658241] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1435.702695] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' 19:36:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c341a35eb0f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114380b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2dee1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093f04000000663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c46600"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1435.761317] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1435.775273] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1435.788602] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1435.796077] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1435.830564] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1435.847066] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1435.867538] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1435.895785] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.117846] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.143910] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.160545] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.187534] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.306218] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.325040] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' 19:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:36:51 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) close(r4) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0xca) 19:36:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) 19:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="a0c834974ce5ec9d8feacba8a5f0d29ab51168eecc4214861bdd9d57993ddef625581f01010000ab081942b708f1bc912ae998dc982b1fb12995431305f25624f0eb4337c2"], 0x45) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbbd, 0x0, 0x2, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x59, 0xe75d, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000225bd7000fbdbdf2501000008000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000a00), &(0x7f00000009c0)=0x13e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000600)={0x100000000}) fremovexattr(r2, &(0x7f0000000040)=@known='user.syz\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(r2, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f00000ddff8), 0x102000000) [ 1436.431177] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1436.437760] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' 19:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1436.501285] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1436.511032] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.531095] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1436.552011] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.569143] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1436.576695] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1436.605517] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1436.612364] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.615443] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1436.632149] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.639831] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1436.648292] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.649719] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1436.677141] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.767769] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1436.787041] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1436.809401] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1436.817095] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1436.873926] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1436.880475] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' 19:36:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004002}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x0, 0x7, 0x1, 0xa915, 0x0, 0x0, 0x8, 0x3}, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) fstat(r1, &(0x7f0000000380)) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c}]) 19:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:36:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:36:51 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) close(r4) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0xca) [ 1436.917101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 19:36:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004002}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x0, 0x7, 0x1, 0xa915, 0x0, 0x0, 0x8, 0x3}, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) fstat(r1, &(0x7f0000000380)) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c}]) 19:36:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004002}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x0, 0x7, 0x1, 0xa915, 0x0, 0x0, 0x8, 0x3}, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) fstat(r1, &(0x7f0000000380)) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c}]) [ 1436.970700] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1436.989211] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1437.024937] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1437.034670] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.058681] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.074998] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1437.090545] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.106622] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.129009] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env [ 1437.155889] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1437.176063] kobject: 'loop4' (000000000b968699): kobject_uevent_env [ 1437.188938] kobject: 'loop4' (000000000b968699): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1437.217872] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env 19:36:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x6, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004002}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000005c0)={0x0, 0x7, 0x1, 0xa915, 0x0, 0x0, 0x8, 0x3}, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) fstat(r1, &(0x7f0000000380)) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c}]) [ 1437.228579] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.244294] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1437.274154] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.294856] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.318746] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1437.387944] kobject: 'loop3' (000000009e5ff76c): kobject_uevent_env 19:36:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c341a35eb0f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114380b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2dee1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093f04000000663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c46600"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1437.456723] kobject: 'loop3' (000000009e5ff76c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1437.494626] kobject: 'loop2' (000000001d92c684): kobject_uevent_env [ 1437.518162] kobject: 'loop2' (000000001d92c684): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1437.533505] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.554667] kobject: 'holders' (000000005a1f6423): kobject_cleanup, parent 00000000d3483564 [ 1437.562508] kobject: 'loop0' (0000000006043ad7): kobject_uevent_env [ 1437.577876] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.588812] kobject: 'loop0' (0000000006043ad7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1437.591714] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.608701] kobject: 'holders' (000000005a1f6423): auto cleanup kobject_del [ 1437.619822] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.629595] kobject: 'loop1' (00000000ddd608f9): kobject_uevent_env [ 1437.630287] kobject: 'holders' (000000005a1f6423): calling ktype release [ 1437.651109] kobject: (000000005a1f6423): dynamic_kobj_release [ 1437.655526] kobject: 'loop1' (00000000ddd608f9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1437.670670] kobject: 'kvm' (0000000047c9aa87): kobject_uevent_env [ 1437.678485] kobject: 'holders': free name [ 1437.694574] kobject: 'kvm' (0000000047c9aa87): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1437.710200] kobject: 'loop3p1' (00000000d3483564): kobject_uevent_env [ 1437.719041] kobject: 'loop5' (00000000c463e5bf): kobject_uevent_env [ 1437.740250] kobject: 'loop3p1' (00000000d3483564): fill_kobj_path: path = '/devices/virtual/block/loop3/loop3p1' [ 1437.751613] kobject: 'loop5' (00000000c463e5bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 19:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c341a35eb0f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114380b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2dee1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093f04000000663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c46600"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) msgctl$IPC_RMID(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1437.815702] kobject: 'holders' (000000009f9721cd