1:22:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) [ 720.813624] FAT-fs (loop2): Can't find a valid FAT filesystem 01:22:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) [ 720.979035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:22:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@dots='dots'}, {@fat=@dos1xfloppy='dos1xfloppy'}]}) 01:22:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 721.139770] protocol 88fb is buggy, dev hsr_slave_0 [ 721.144948] protocol 88fb is buggy, dev hsr_slave_1 [ 721.178378] FAT-fs (loop2): bogus number of reserved sectors 01:22:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 01:22:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) [ 721.226737] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 721.280874] FAT-fs (loop2): Can't find a valid FAT filesystem 01:22:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@dots='dots'}, {@fat=@dos1xfloppy='dos1xfloppy'}]}) 01:22:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) [ 721.377728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.384495] protocol 88fb is buggy, dev hsr_slave_0 [ 721.384564] protocol 88fb is buggy, dev hsr_slave_1 [ 721.389735] protocol 88fb is buggy, dev hsr_slave_0 [ 721.389792] protocol 88fb is buggy, dev hsr_slave_1 01:22:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 721.478360] FAT-fs (loop2): bogus number of reserved sectors [ 721.507047] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code 01:22:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) [ 721.575180] FAT-fs (loop2): Can't find a valid FAT filesystem 01:22:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:22:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:16 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:22:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:22:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:22:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") 01:22:17 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:22:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000180)) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) [ 722.261768] mmap: syz-executor.1 (17783): VmData 18407424 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 01:22:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") 01:22:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4eac94f2506444b99cd861012fc305ac9b01da8648c93489310b6dee7c92993964a552715b15dc45edd0f8a32dea7bbb63a725f65ff13f3ab5909c89354637d05fac25de48ad0", 0x4d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha224-avx2\x00'}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10001) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1b) sendmmsg(r2, &(0x7f0000003d40), 0x40000000000008b, 0x0) close(r2) 01:22:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="fadc1f123c123f319bc070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 01:22:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000180)) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) 01:22:17 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x80000007ffffffe) 01:22:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="fadc1f123c123f319bc070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 01:22:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000180)) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) 01:22:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 01:22:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="fadc1f123c123f319bc070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 01:22:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x123, 0x2}) 01:22:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") 01:22:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000180)) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) 01:22:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 01:22:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="fadc1f123c123f319bc070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 01:22:18 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 01:22:18 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 01:22:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 01:22:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") 01:22:18 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 01:22:18 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000000)=""/196, 0xc4, 0x0, 0x0) 01:22:18 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 01:22:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) sendfile(r2, r0, 0x0, 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') 01:22:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:22:18 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 01:22:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) 01:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:22:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800815ae00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 01:22:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) [ 724.215552] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 01:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 724.302513] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 01:22:19 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000000)=""/196, 0xc4, 0x0, 0x0) 01:22:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) 01:22:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:22:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800815ae00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 01:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:22:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) [ 724.637546] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 724.719903] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 01:22:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:22:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800815ae00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) [ 725.018383] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 725.035489] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 01:22:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000000)=""/196, 0xc4, 0x0, 0x0) 01:22:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800815ae00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 01:22:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:22:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) [ 725.533885] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 725.542265] net_ratelimit: 19 callbacks suppressed [ 725.542270] protocol 88fb is buggy, dev hsr_slave_0 [ 725.549805] protocol 88fb is buggy, dev hsr_slave_0 [ 725.552343] protocol 88fb is buggy, dev hsr_slave_1 [ 725.557341] protocol 88fb is buggy, dev hsr_slave_1 [ 725.619843] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 01:22:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) [ 726.259767] protocol 88fb is buggy, dev hsr_slave_0 [ 726.264911] protocol 88fb is buggy, dev hsr_slave_1 01:22:21 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000000)=""/196, 0xc4, 0x0, 0x0) 01:22:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:22:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) [ 726.579756] protocol 88fb is buggy, dev hsr_slave_0 [ 726.580894] protocol 88fb is buggy, dev hsr_slave_0 [ 726.584908] protocol 88fb is buggy, dev hsr_slave_1 [ 726.590491] protocol 88fb is buggy, dev hsr_slave_1 01:22:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) 01:22:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 01:22:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000005e80)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="91", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x8dffffff}, 0x0) 01:22:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) 01:22:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:22 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'ip6erspan0\x00', 0x11}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 01:22:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 727.426606] binder_alloc: 18977: binder_alloc_buf, no vma 01:22:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x18) [ 727.467174] binder: 18977:18979 transaction failed 29189/-3, size 24-8 line 2970 01:22:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2000d, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffffa0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) lstat(0x0, &(0x7f0000000bc0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffd9e) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xdf32}, 0x14) shutdown(r1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_create(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) 01:22:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000004000004c870004000200aa0802000000000000000000000105000600200010000a00000000000000000500e50000070000001f0000000000002500234e000000020001000000000000e7ff010000627c05000500000000000a00000000000000ff170000d18e7b81ce4a5aded7d42781c786000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 01:22:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 01:22:22 executing program 3: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="130000001000ffdde200f49ff60f050000230a009d000000110ac53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be994cbe4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc159670fe9800"/232, 0xe8) 01:22:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000080a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 727.799602] binder_alloc: 19304: binder_alloc_buf, no vma 01:22:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000004000004c870004000200aa0802000000000000000000000105000600200010000a00000000000000000500e50000070000001f0000000000002500234e000000020001000000000000e7ff010000627c05000500000000000a00000000000000ff170000d18e7b81ce4a5aded7d42781c786000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) [ 727.843157] binder: 19304:19316 transaction failed 29189/-3, size 24-8 line 2970 [ 727.863824] netlink: 137 bytes leftover after parsing attributes in process `syz-executor.3'. 01:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 01:22:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 01:22:23 executing program 3: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="130000001000ffdde200f49ff60f050000230a009d000000110ac53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be994cbe4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc159670fe9800"/232, 0xe8) 01:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 01:22:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000004000004c870004000200aa0802000000000000000000000105000600200010000a00000000000000000500e50000070000001f0000000000002500234e000000020001000000000000e7ff010000627c05000500000000000a00000000000000ff170000d18e7b81ce4a5aded7d42781c786000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000080a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 728.132180] netlink: 137 bytes leftover after parsing attributes in process `syz-executor.3'. [ 728.147406] binder_alloc: 19491: binder_alloc_buf, no vma 01:22:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) [ 728.179901] binder: 19491:19530 transaction failed 29189/-3, size 24-8 line 2970 01:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 01:22:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000004000004c870004000200aa0802000000000000000000000105000600200010000a00000000000000000500e50000070000001f0000000000002500234e000000020001000000000000e7ff010000627c05000500000000000a00000000000000ff170000d18e7b81ce4a5aded7d42781c786000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:23 executing program 3: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="130000001000ffdde200f49ff60f050000230a009d000000110ac53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be994cbe4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc159670fe9800"/232, 0xe8) 01:22:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 01:22:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000080a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 728.406554] binder_alloc: 19555: binder_alloc_buf, no vma [ 728.434180] netlink: 137 bytes leftover after parsing attributes in process `syz-executor.3'. 01:22:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) flock(r1, 0x8) [ 728.449181] binder: 19555:19557 transaction failed 29189/-3, size 24-8 line 2970 01:22:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:23 executing program 3: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="130000001000ffdde200f49ff60f050000230a009d000000110ac53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be994cbe4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc159670fe9800"/232, 0xe8) 01:22:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000080a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 01:22:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) flock(r1, 0x8) [ 728.666508] netlink: 137 bytes leftover after parsing attributes in process `syz-executor.3'. 01:22:23 executing program 5: setreuid(0x0, 0xffffffffffffffff) 01:22:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl(r1, 0x80044100, &(0x7f0000000000)) 01:22:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) flock(r1, 0x8) 01:22:24 executing program 5: setreuid(0x0, 0xffffffffffffffff) 01:22:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 01:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 5: setreuid(0x0, 0xffffffffffffffff) 01:22:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl(r1, 0x80044100, &(0x7f0000000000)) 01:22:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) flock(r1, 0x8) 01:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 5: setreuid(0x0, 0xffffffffffffffff) 01:22:24 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl(r1, 0x80044100, &(0x7f0000000000)) 01:22:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xffff0000, 0x0, 0xfffff000}}) 01:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:22:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl(r1, 0x80044100, &(0x7f0000000000)) 01:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xffff0000, 0x0, 0xfffff000}}) 01:22:24 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:22:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x8, 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x180000000) 01:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:24 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:22:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xffff0000, 0x0, 0xfffff000}}) 01:22:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) dup2(r0, r1) 01:22:25 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 01:22:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000101000008912, &(0x7f0000000000)="0adc060000003f319bc070") r1 = socket$inet(0x10, 0x880400000003, 0x6) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 01:22:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xffff0000, 0x0, 0xfffff000}}) [ 730.210864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:22:25 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:25 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 01:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) dup2(r0, r1) 01:22:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000101000008912, &(0x7f0000000000)="0adc060000003f319bc070") r1 = socket$inet(0x10, 0x880400000003, 0x6) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 01:22:25 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 01:22:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x1) 01:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) dup2(r0, r1) [ 730.581289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 730.591565] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! [ 730.739848] net_ratelimit: 19 callbacks suppressed [ 730.739898] protocol 88fb is buggy, dev hsr_slave_0 [ 730.750155] protocol 88fb is buggy, dev hsr_slave_0 [ 730.750174] protocol 88fb is buggy, dev hsr_slave_1 [ 730.750223] protocol 88fb is buggy, dev hsr_slave_1 01:22:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:25 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 01:22:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000101000008912, &(0x7f0000000000)="0adc060000003f319bc070") r1 = socket$inet(0x10, 0x880400000003, 0x6) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 01:22:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x1) 01:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) dup2(r0, r1) [ 730.971759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:22:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x1) 01:22:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000200000037000000"], 0x14}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x331, 0x0) 01:22:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000101000008912, &(0x7f0000000000)="0adc060000003f319bc070") r1 = socket$inet(0x10, 0x880400000003, 0x6) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 01:22:26 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 01:22:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) [ 731.300959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2000000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1}, 0x0) 01:22:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x1) 01:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2000000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1}, 0x0) [ 731.464425] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.4'. [ 731.542297] protocol 88fb is buggy, dev hsr_slave_0 [ 731.547541] protocol 88fb is buggy, dev hsr_slave_1 [ 731.599236] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.4'. 01:22:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') sendfile(r0, r2, 0x0, 0x80040009) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 01:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2000000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1}, 0x0) 01:22:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r0, 0x0, 0x265e1f6) [ 731.779784] protocol 88fb is buggy, dev hsr_slave_0 [ 731.779847] protocol 88fb is buggy, dev hsr_slave_0 [ 731.784942] protocol 88fb is buggy, dev hsr_slave_1 [ 731.795350] protocol 88fb is buggy, dev hsr_slave_1 01:22:27 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6a1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 01:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2000000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1}, 0x0) [ 731.991679] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29289 sclass=netlink_xfrm_socket pig=20943 comm=syz-executor.0 01:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000200000037000000"], 0x14}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x331, 0x0) 01:22:27 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x2}], 0x20}, 0x0) 01:22:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r0, 0x0, 0x265e1f6) 01:22:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x600000000000000, [0x20f, 0x4800, 0x400000b1], [0xc2]}) 01:22:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') sendfile(r0, r2, 0x0, 0x80040009) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 732.682106] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29289 sclass=netlink_xfrm_socket pig=21096 comm=syz-executor.0 [ 732.711943] kvm [21084]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 01:22:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r0, 0x0, 0x265e1f6) 01:22:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x600000000000000, [0x20f, 0x4800, 0x400000b1], [0xc2]}) [ 733.006437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29289 sclass=netlink_xfrm_socket pig=21323 comm=syz-executor.0 01:22:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r0, 0x0, 0x265e1f6) [ 733.198474] kvm [21327]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 01:22:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) [ 733.294854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29289 sclass=netlink_xfrm_socket pig=21333 comm=syz-executor.0 01:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000200000037000000"], 0x14}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x331, 0x0) 01:22:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x600000000000000, [0x20f, 0x4800, 0x400000b1], [0xc2]}) 01:22:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x8}, 'port1\x00'}) 01:22:28 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x2}], 0x20}, 0x0) 01:22:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') sendfile(r0, r2, 0x0, 0x80040009) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 01:22:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x8}, 'port1\x00'}) [ 733.959390] kvm [21441]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 01:22:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000040000000019, &(0x7f0000000000)=0x4101, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x802000) 01:22:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x600000000000000, [0x20f, 0x4800, 0x400000b1], [0xc2]}) 01:22:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x8}, 'port1\x00'}) 01:22:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x8}, 'port1\x00'}) [ 734.378755] kvm [21469]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 01:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000200000037000000"], 0x14}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x331, 0x0) 01:22:29 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x20802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1f000000, 0x4004400}) 01:22:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:22:29 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x2}], 0x20}, 0x0) 01:22:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') sendfile(r0, r2, 0x0, 0x80040009) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 01:22:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000140)="22000000e9037c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) 01:22:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgr_up/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x536) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xb7b4f4698d16c1c5) pipe(0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xffffff11) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = accept(r1, &(0x7f00000001c0)=@xdp, &(0x7f0000000240)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x40, 0xffffffffffffffe0, 0x6a85, 0x3f, 0xfff}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='dctcp\x00N\xc7\xfcd\xf7\x8a\x06\xa2>k;\x9eOP\xe1?\xe4\xe2R>\xec\xd3;\x80\x9f\x92\x8d;>\xee\xb8[w\n\xa7M\n\xec\xe8t\xf4{3f\x97\xf8?\xee\x93$T\xc1\xd4N8\xd6\a\x10%=\xc6G\xc2\xa0\xfe]Q\x01Bd\\\xe2\x05i$\xb5\xf9|T\x16Hy\xb4\x9f\xa2i\xe0s\x14\x9c\xefDn\xb2y\x86\xa7]\x81\t\x9e\x86\xb3z\xb5\xf5dQ6\xaf\xab\x938-SL\xa0.\xd5V\x95g\xbax\x9b-W\x06\xd3{\x92\x8d=\x18\xbe$\x88*}\xaf\x12f\x93\xde\x00\x01~m\x95\xe9\x11\xbd\x8c\xa9\xfb\xbe}\xdc\x05}+\xa3q\xf0\xa8\xfe\x16.\xf42ZI,\f3{\xd8I\x84\xdb\xd2\x1er\x93\xe58z\x94\xfb\xc3\x8c\xd9Gj\xd6\x18\a\'\xc1w|u/\x9a6\xc2\x03,8\x9f9\xe3u\x846\x06\x191a\\\xcb\x17\xf9\x1f\xda\xb8\x80B!\x9d~\xde', 0xee) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0xfffffffffffffe82) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x200004e23}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xff69) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xffffff27) sendto$inet(r2, &(0x7f00000003c0)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) shutdown(r2, 0x1) 01:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000140)="22000000e9037c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) 01:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000140)="22000000e9037c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) 01:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 01:22:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000007eff0)=[{&(0x7f0000ae6fc7)="390000001100094701bb61e1c3050001070000000400000045efffff08009b0019001a000f000000220001071c06000004e9ff0004000d0005", 0x39}], 0x1) 01:22:30 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x2}], 0x20}, 0x0) 01:22:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000140)="22000000e9037c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) 01:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x2000400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x1262, 0x0) [ 735.786347] net_ratelimit: 25 callbacks suppressed [ 735.786373] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 01:22:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000007eff0)=[{&(0x7f0000ae6fc7)="390000001100094701bb61e1c3050001070000000400000045efffff08009b0019001a000f000000220001071c06000004e9ff0004000d0005", 0x39}], 0x1) 01:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 735.939773] protocol 88fb is buggy, dev hsr_slave_0 [ 735.944955] protocol 88fb is buggy, dev hsr_slave_1 [ 735.949793] protocol 88fb is buggy, dev hsr_slave_0 [ 735.955228] protocol 88fb is buggy, dev hsr_slave_1 01:22:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x40000000], [0xc2]}) 01:22:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000007eff0)=[{&(0x7f0000ae6fc7)="390000001100094701bb61e1c3050001070000000400000045efffff08009b0019001a000f000000220001071c06000004e9ff0004000d0005", 0x39}], 0x1) [ 736.116093] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 01:22:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 01:22:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000007eff0)=[{&(0x7f0000ae6fc7)="390000001100094701bb61e1c3050001070000000400000045efffff08009b0019001a000f000000220001071c06000004e9ff0004000d0005", 0x39}], 0x1) 01:22:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 01:22:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xeffdffff, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 01:22:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) [ 736.660111] protocol 88fb is buggy, dev hsr_slave_0 [ 736.665274] protocol 88fb is buggy, dev hsr_slave_1 01:22:31 executing program 5: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 01:22:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") gettid() timer_create(0x3, 0x0, &(0x7f0000000040)) exit(0x0) timer_delete(0x0) 01:22:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xeffdffff, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 01:22:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) dup2(r0, r1) 01:22:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 01:22:31 executing program 5: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:31 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 736.979755] protocol 88fb is buggy, dev hsr_slave_0 [ 736.979808] protocol 88fb is buggy, dev hsr_slave_1 01:22:32 executing program 5: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:32 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ftruncate(r0, 0x0) 01:22:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xeffdffff, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 01:22:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 01:22:32 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:32 executing program 5: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") gettid() timer_create(0x3, 0x0, &(0x7f0000000040)) exit(0x0) timer_delete(0x0) 01:22:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 01:22:32 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1ff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 01:22:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xeffdffff, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 01:22:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000000440)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0) dup2(r0, r1) 01:22:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:32 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c5d07cc9ab805d8e27059e03bc7ae1e99e0a4e666508cf5914e392b6c98cff38ff3db410c40bdfdd70d59db3a015090754993ee932", 0x35}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8954, &(0x7f0000000000)=0x2) 01:22:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 01:22:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:32 executing program 5: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 01:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") gettid() timer_create(0x3, 0x0, &(0x7f0000000040)) exit(0x0) timer_delete(0x0) 01:22:33 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c5d07cc9ab805d8e27059e03bc7ae1e99e0a4e666508cf5914e392b6c98cff38ff3db410c40bdfdd70d59db3a015090754993ee932", 0x35}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8954, &(0x7f0000000000)=0x2) 01:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:33 executing program 5: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:22:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:33 executing program 5: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:33 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c5d07cc9ab805d8e27059e03bc7ae1e99e0a4e666508cf5914e392b6c98cff38ff3db410c40bdfdd70d59db3a015090754993ee932", 0x35}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8954, &(0x7f0000000000)=0x2) 01:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:33 executing program 5: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:22:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") gettid() timer_create(0x3, 0x0, &(0x7f0000000040)) exit(0x0) timer_delete(0x0) 01:22:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x3ffff}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 01:22:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c5d07cc9ab805d8e27059e03bc7ae1e99e0a4e666508cf5914e392b6c98cff38ff3db410c40bdfdd70d59db3a015090754993ee932", 0x35}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8954, &(0x7f0000000000)=0x2) 01:22:34 executing program 3: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 01:22:34 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00\x93\x8e\xaf_?P1W^\xfeG\xfd\x1d\xdc\xf9\xc1\b\xc7r\xf3\x8d\xcf\xb5Vv\x7f\xd2\xca\xca\x9b\xd1\x10sP\'U\xdf\xbf.\xd0\xe0\x1bH\x06\xda\xc4\xc8\xf2\xccH\x9e\x19') ioctl$FS_IOC_GETFLAGS(r0, 0xb702, 0x0) 01:22:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000140)=0x10004) 01:22:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) 01:22:34 executing program 3: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 01:22:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000140)=0x10004) 01:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) 01:22:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/135, 0x87) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$loop(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:22:35 executing program 3: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 01:22:35 executing program 1: r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000001e0007f1fff701000080000007003f005307a33d6c39080001454a", 0x1f) 01:22:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @exit], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x2f2, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) 01:22:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000140)=0x10004) 01:22:35 executing program 3: capset(&(0x7f00005cf000)={0x19980330}, &(0x7f0000f03fe8)) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 01:22:35 executing program 1: r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000001e0007f1fff701000080000007003f005307a33d6c39080001454a", 0x1f) 01:22:35 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x38, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}}, 0x0) [ 740.819756] net_ratelimit: 19 callbacks suppressed [ 740.819766] protocol 88fb is buggy, dev hsr_slave_0 [ 740.829912] protocol 88fb is buggy, dev hsr_slave_1 [ 741.139756] protocol 88fb is buggy, dev hsr_slave_0 [ 741.139803] protocol 88fb is buggy, dev hsr_slave_1 [ 741.144896] protocol 88fb is buggy, dev hsr_slave_1 01:22:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) 01:22:36 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x38, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}}, 0x0) 01:22:36 executing program 1: r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000001e0007f1fff701000080000007003f005307a33d6c39080001454a", 0x1f) 01:22:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @exit], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x2f2, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000140)=0x10004) 01:22:36 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x38, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}}, 0x0) 01:22:36 executing program 1: r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000001e0007f1fff701000080000007003f005307a33d6c39080001454a", 0x1f) 01:22:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @exit], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x2f2, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 741.939732] protocol 88fb is buggy, dev hsr_slave_0 [ 741.944886] protocol 88fb is buggy, dev hsr_slave_1 01:22:37 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x38, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}}, 0x0) [ 742.179730] protocol 88fb is buggy, dev hsr_slave_0 [ 742.179771] protocol 88fb is buggy, dev hsr_slave_1 [ 742.184832] protocol 88fb is buggy, dev hsr_slave_1 01:22:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @exit], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x2f2, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 01:22:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:39 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 01:22:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 01:22:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:40 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 01:22:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 746.099762] net_ratelimit: 16 callbacks suppressed [ 746.099771] protocol 88fb is buggy, dev hsr_slave_0 [ 746.109980] protocol 88fb is buggy, dev hsr_slave_1 [ 746.339763] protocol 88fb is buggy, dev hsr_slave_0 [ 746.339805] protocol 88fb is buggy, dev hsr_slave_1 [ 746.344862] protocol 88fb is buggy, dev hsr_slave_1 [ 747.059764] protocol 88fb is buggy, dev hsr_slave_0 [ 747.064901] protocol 88fb is buggy, dev hsr_slave_1 [ 747.379767] protocol 88fb is buggy, dev hsr_slave_0 [ 747.379826] protocol 88fb is buggy, dev hsr_slave_1 [ 747.384932] protocol 88fb is buggy, dev hsr_slave_1 01:22:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:43 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:43 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 01:22:43 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 01:22:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 01:22:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:44 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) [ 751.219753] net_ratelimit: 16 callbacks suppressed [ 751.219763] protocol 88fb is buggy, dev hsr_slave_0 [ 751.229874] protocol 88fb is buggy, dev hsr_slave_1 [ 751.539795] protocol 88fb is buggy, dev hsr_slave_0 [ 751.539845] protocol 88fb is buggy, dev hsr_slave_1 [ 751.545501] protocol 88fb is buggy, dev hsr_slave_1 01:22:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 01:22:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 01:22:46 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008807, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:22:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 01:22:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 752.340499] protocol 88fb is buggy, dev hsr_slave_0 [ 752.346294] protocol 88fb is buggy, dev hsr_slave_1 [ 752.579764] protocol 88fb is buggy, dev hsr_slave_0 [ 752.580352] protocol 88fb is buggy, dev hsr_slave_0 [ 752.584868] protocol 88fb is buggy, dev hsr_slave_1 01:22:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x10e755) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000240)) 01:22:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 01:22:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 01:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 01:22:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 01:22:48 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4036efb12001b400100000001000000c1c83a7d0020", 0x2e}], 0x1}, 0x0) 01:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 01:22:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000eaffac1414aa0000000040000000113c04a23743f008499547b5000000000000"], 0x38}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:48 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:logrotate_exec_t:s0-', 0x26, 0x0) 01:22:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 753.912744] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 753.933332] SELinux: Context system_u:object_r:logrotate_exec_t:s0- is not valid (left unmapped). 01:22:49 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4036efb12001b400100000001000000c1c83a7d0020", 0x2e}], 0x1}, 0x0) 01:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) [ 753.964719] nla_parse: 2 callbacks suppressed [ 753.964729] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.967935] kauditd_printk_skb: 9 callbacks suppressed [ 753.967959] audit: type=1400 audit(1555464169.029:343): avc: denied { relabelto } for pid=24502 comm="syz-executor.5" name="UNIX" dev="sockfs" ino=143717 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_stream_socket permissive=1 [ 753.978475] gretap0: FDB only supports static addresses 01:22:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:logrotate_exec_t:s0-', 0x26, 0x0) 01:22:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) [ 754.087665] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 01:22:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:22:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:22:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000eaffac1414aa0000000040000000113c04a23743f008499547b5000000000000"], 0x38}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:49 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4036efb12001b400100000001000000c1c83a7d0020", 0x2e}], 0x1}, 0x0) 01:22:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-512-generic,chacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="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", 0x96d) 01:22:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:logrotate_exec_t:s0-', 0x26, 0x0) [ 754.304653] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.309128] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 754.344124] gretap0: FDB only supports static addresses 01:22:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000eaffac1414aa0000000040000000113c04a23743f008499547b5000000000000"], 0x38}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:22:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:22:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:logrotate_exec_t:s0-', 0x26, 0x0) 01:22:49 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4036efb12001b400100000001000000c1c83a7d0020", 0x2e}], 0x1}, 0x0) 01:22:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:22:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000eaffac1414aa0000000040000000113c04a23743f008499547b5000000000000"], 0x38}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:22:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 754.510176] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.535096] gretap0: FDB only supports static addresses 01:22:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 754.624092] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 01:22:49 executing program 5: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:22:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:22:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 754.753029] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. 01:22:49 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) [ 754.844999] gretap0: FDB only supports static addresses 01:22:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 01:22:50 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:50 executing program 5: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:22:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:50 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 5: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:22:50 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:50 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:50 executing program 5: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:22:50 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:50 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:50 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x3, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000200)={0x7}) 01:22:50 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:50 executing program 4: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:50 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:50 executing program 1: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:51 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:51 executing program 4: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:51 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:51 executing program 1: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 756.503501] net_ratelimit: 16 callbacks suppressed [ 756.503529] protocol 88fb is buggy, dev hsr_slave_0 [ 756.514752] protocol 88fb is buggy, dev hsr_slave_1 01:22:51 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 756.739811] protocol 88fb is buggy, dev hsr_slave_0 [ 756.745345] protocol 88fb is buggy, dev hsr_slave_1 [ 756.750659] protocol 88fb is buggy, dev hsr_slave_0 [ 756.756558] protocol 88fb is buggy, dev hsr_slave_1 [ 756.813629] overlayfs: filesystem on './file0' not supported as upperdir 01:22:52 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:52 executing program 4: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:52 executing program 1: mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x400) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 01:22:52 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 01:22:52 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001680)=0xf91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:22:52 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) [ 757.459747] protocol 88fb is buggy, dev hsr_slave_0 [ 757.464886] protocol 88fb is buggy, dev hsr_slave_1 01:22:52 executing program 4: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:52 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) 01:22:52 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 01:22:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 01:22:52 executing program 4: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) [ 757.779744] protocol 88fb is buggy, dev hsr_slave_0 [ 757.779785] protocol 88fb is buggy, dev hsr_slave_1 01:22:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 01:22:52 executing program 3: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 4: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 01:22:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 01:22:53 executing program 3: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 1: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 4: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 01:22:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40008032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 01:22:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 01:22:53 executing program 3: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:53 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@nls={'nls', 0x3d, '\np775'}}]}) 01:22:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:22:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40008032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 01:22:53 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 01:22:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 01:22:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x200000000000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) [ 758.572789] hfsplus: unable to load nls mapping " [ 758.572789] p775" [ 758.603297] hfsplus: unable to parse mount options [ 758.684561] Enabling of bearer rejected, failed to enable media [ 758.706899] hfsplus: unable to load nls mapping " [ 758.706899] p775" [ 758.735751] hfsplus: unable to parse mount options 01:22:54 executing program 1: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) 01:22:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 01:22:54 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0ad401003c123f319bd070") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 01:22:54 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@nls={'nls', 0x3d, '\np775'}}]}) 01:22:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x200000000000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 01:22:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40008032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 01:22:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 01:22:54 executing program 1: r0 = getpgid(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) [ 759.163831] Enabling of bearer rejected, failed to enable media [ 759.198769] hfsplus: unable to load nls mapping " [ 759.198769] p775" [ 759.207753] hfsplus: unable to parse mount options 01:22:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x200000000000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 01:22:54 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0ad401003c123f319bd070") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 01:22:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40008032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 01:22:54 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@nls={'nls', 0x3d, '\np775'}}]}) [ 759.371982] Enabling of bearer rejected, failed to enable media 01:22:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1000000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f00000002c0)=""/246) 01:22:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x200000000000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 01:22:54 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0ad401003c123f319bd070") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 759.510032] hfsplus: unable to load nls mapping " [ 759.510032] p775" [ 759.541595] hfsplus: unable to parse mount options [ 759.569501] Enabling of bearer rejected, failed to enable media 01:22:54 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") membarrier(0x2, 0x0) 01:22:54 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@nls={'nls', 0x3d, '\np775'}}]}) 01:22:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:54 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0ad401003c123f319bd070") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 01:22:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1000000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f00000002c0)=""/246) [ 759.926489] hfsplus: unable to load nls mapping " [ 759.926489] p775" [ 759.949234] hfsplus: unable to parse mount options 01:22:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") membarrier(0x2, 0x0) 01:22:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1000000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f00000002c0)=""/246) 01:22:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:55 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") membarrier(0x2, 0x0) 01:22:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1000000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f00000002c0)=""/246) 01:22:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") membarrier(0x2, 0x0) 01:22:55 executing program 0: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:55 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:55 executing program 5: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:55 executing program 0: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:56 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:56 executing program 5: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:56 executing program 0: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:56 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 01:22:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) [ 761.120506] SELinux: duplicate or incompatible mount options [ 761.157970] SELinux: duplicate or incompatible mount options 01:22:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 01:22:56 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 01:22:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x2000000000000080}) 01:22:56 executing program 5: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, r0) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 01:22:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000100)) 01:22:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 01:22:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000024"], 0xd}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) [ 761.406830] SELinux: duplicate or incompatible mount options 01:22:56 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 01:22:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000024"], 0xd}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) [ 761.492303] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 01:22:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 01:22:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000100)) [ 761.619760] net_ratelimit: 18 callbacks suppressed [ 761.619768] protocol 88fb is buggy, dev hsr_slave_0 [ 761.629969] protocol 88fb is buggy, dev hsr_slave_1 [ 761.638704] SELinux: duplicate or incompatible mount options 01:22:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000024"], 0xd}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) [ 761.939751] protocol 88fb is buggy, dev hsr_slave_0 [ 761.939757] protocol 88fb is buggy, dev hsr_slave_0 [ 761.939830] protocol 88fb is buggy, dev hsr_slave_1 [ 761.944878] protocol 88fb is buggy, dev hsr_slave_1 01:22:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000100)) 01:22:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000024"], 0xd}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) 01:22:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000140)) 01:22:57 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 01:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 01:22:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) 01:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 01:22:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) [ 762.308600] SELinux: duplicate or incompatible mount options 01:22:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000100)) 01:22:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) 01:22:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000140)) 01:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) [ 762.491084] IPVS: ftp: loaded support on port[0] = 21 01:22:57 executing program 0: r0 = socket$inet6(0xa, 0x400000003, 0x800000000000003e) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b1", 0x1}], 0x1}, 0x0) recvfrom$inet6(r0, 0x0, 0x1d9, 0x0, 0x0, 0x0) 01:22:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) 01:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) 01:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 01:22:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000140)) 01:22:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000140)) 01:22:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) [ 762.706112] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 762.739751] protocol 88fb is buggy, dev hsr_slave_0 [ 762.744884] protocol 88fb is buggy, dev hsr_slave_1 [ 762.854675] IPVS: ftp: loaded support on port[0] = 21 01:22:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 01:22:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r1, 0x80044942, 0x0) 01:22:58 executing program 2: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x402, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) 01:22:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 01:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 762.979738] protocol 88fb is buggy, dev hsr_slave_0 [ 762.979744] protocol 88fb is buggy, dev hsr_slave_0 [ 763.064515] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.136614] IPVS: ftp: loaded support on port[0] = 21 01:22:58 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 01:22:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 01:22:58 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x17, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 01:22:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 01:22:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) [ 763.542339] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.565674] IPVS: ftp: loaded support on port[0] = 21 01:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 01:22:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x17, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 01:22:58 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:58 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) [ 763.791701] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 01:22:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) 01:22:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x110000000002, &(0x7f00000005c0)="c8d63f23", 0x4) 01:22:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x17, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:59 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:59 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 01:22:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 01:22:59 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:22:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x17, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:22:59 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) 01:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0xffffff83, 0x4, 0x6}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 01:22:59 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 01:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0xffffff83, 0x4, 0x6}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 01:23:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0xffffff83, 0x4, 0x6}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 01:23:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) 01:23:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) 01:23:00 executing program 0: syz_emit_ethernet(0xfffffffffffffd17, 0x0, &(0x7f0000000000)={0x0, 0x2, [0xf6e]}) 01:23:00 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0308000000000000c20800000000000000000000000067681b00000000000000000000fb6c7a301d79a890d2ff54"}, 0x50) 01:23:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xffffffffffffffff) 01:23:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0xffffff83, 0x4, 0x6}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) [ 765.782757] SELinux: failed to load policy 01:23:00 executing program 0: syz_emit_ethernet(0xfffffffffffffd17, 0x0, &(0x7f0000000000)={0x0, 0x2, [0xf6e]}) 01:23:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xffffffffffffffff) 01:23:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) 01:23:01 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0308000000000000c20800000000000000000000000067681b00000000000000000000fb6c7a301d79a890d2ff54"}, 0x50) 01:23:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) [ 766.122450] SELinux: failed to load policy 01:23:01 executing program 0: syz_emit_ethernet(0xfffffffffffffd17, 0x0, &(0x7f0000000000)={0x0, 0x2, [0xf6e]}) 01:23:01 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0308000000000000c20800000000000000000000000067681b00000000000000000000fb6c7a301d79a890d2ff54"}, 0x50) [ 766.256988] SELinux: failed to load policy 01:23:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) 01:23:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xffffffffffffffff) 01:23:01 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0308000000000000c20800000000000000000000000067681b00000000000000000000fb6c7a301d79a890d2ff54"}, 0x50) 01:23:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) 01:23:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:01 executing program 0: syz_emit_ethernet(0xfffffffffffffd17, 0x0, &(0x7f0000000000)={0x0, 0x2, [0xf6e]}) [ 766.402019] SELinux: failed to load policy 01:23:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xffffffffffffffff) 01:23:01 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) 01:23:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:01 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) 01:23:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) [ 766.899760] net_ratelimit: 19 callbacks suppressed [ 766.899779] protocol 88fb is buggy, dev hsr_slave_0 [ 766.909943] protocol 88fb is buggy, dev hsr_slave_1 01:23:02 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) [ 767.139734] protocol 88fb is buggy, dev hsr_slave_0 [ 767.140204] protocol 88fb is buggy, dev hsr_slave_0 [ 767.144967] protocol 88fb is buggy, dev hsr_slave_1 [ 767.150464] protocol 88fb is buggy, dev hsr_slave_1 01:23:02 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) tkill(r0, 0x1004000000016) 01:23:02 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) 01:23:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) 01:23:02 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) 01:23:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) 01:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) 01:23:02 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) 01:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:23:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000140)={'yam0\x00', {0x2, 0x0, @initdev}}) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) 01:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) 01:23:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pread64(r0, 0x0, 0x0, 0x0) 01:23:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) [ 767.870361] protocol 88fb is buggy, dev hsr_slave_0 [ 767.875827] protocol 88fb is buggy, dev hsr_slave_1 01:23:03 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pread64(r0, 0x0, 0x0, 0x0) 01:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="f91c2df1a652c83d6589f99c8e2a392f5dad56b6c5820fe2", 0x18) sendto$unix(r2, &(0x7f0000000200)="a2580bc0a74598b0a63dea9ad069976b", 0x10, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x144) 01:23:03 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x200002d1afa4e, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}}) 01:23:03 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pread64(r0, 0x0, 0x0, 0x0) 01:23:03 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136, 0x88}], 0x1) 01:23:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [{[{}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) 01:23:03 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x200002d1afa4e, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}}) 01:23:03 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pread64(r0, 0x0, 0x0, 0x0) 01:23:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1}) dup2(r2, r1) [ 768.179757] protocol 88fb is buggy, dev hsr_slave_0 [ 768.179762] protocol 88fb is buggy, dev hsr_slave_0 01:23:03 executing program 1: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:03 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x200002d1afa4e, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}}) 01:23:03 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136, 0x88}], 0x1) 01:23:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 01:23:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1}) dup2(r2, r1) 01:23:03 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136, 0x88}], 0x1) 01:23:03 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x200002d1afa4e, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}}) 01:23:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:04 executing program 1: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:04 executing program 3: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:04 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136, 0x88}], 0x1) 01:23:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1}) dup2(r2, r1) 01:23:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1}) dup2(r2, r1) 01:23:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:04 executing program 3: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:04 executing program 1: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 3: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:05 executing program 1: r0 = socket$kcm(0x29, 0x4000000000002, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="ee", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 01:23:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 01:23:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:05 executing program 5: r0 = socket(0xa, 0x3, 0x7a) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:23:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 5: r0 = socket(0xa, 0x3, 0x7a) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:23:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 5: r0 = socket(0xa, 0x3, 0x7a) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:23:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:06 executing program 5: r0 = socket(0xa, 0x3, 0x7a) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:23:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0xae, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) 01:23:06 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0xfffffffd, @tick, {}, {0x0, 0xbf}, @connect}], 0xffffff76) [ 771.814118] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:23:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @raw_data="16981c3a8031bb24c900948d7ce7e3e413245eadbea67d8b016461128e2c0846c40f29cdbc6e2da0c7c171ef62715ccd066cfb9534772091f503c18db4c4ba88e6b29274d93a6bbaf00a1147e36215465f3ac58764b8cd0c61eab449e1bda0ac54ae57c2db10e50dd8979db13fc2c9958e77da50be270904f66cf66396be3234c08701c8700eaa2b4c5fd6d58b5717b59ae29e1c0b55eb3d3fb72d683890c57a1be6f56474c50ce463a033b136be346bfbb319ca1c6f1834ac4d05111c5f8cf1852720d307d2549b"}) 01:23:07 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000, 0x1, &(0x7f0000000a80)=[{&(0x7f00000007c0)="73bb45135fd9e88ea7c52f8e2c2ca2297dd9ed7a1366c98399d6fcc27555853d576df16c63f357df45a0a4f6833d0a061481b001831a8f06e45cdcb3ca6eef22735fdd12e04105a363e7321bfc82bea4b515e957dcad8749d0a16fff283019509dc2086725f473132afec7bb650ecd6e6c1185da1e8ab160b711065226810afe1e59ad9d458b4f9d1651b3348b46502212218908f1e9c822ef7427c2283cfa0c9b224e1844d053", 0xa7, 0x2}], 0x0, 0x0) [ 771.897668] IPVS: persistence engine module ip_vs_pe_dip not found [ 772.019749] net_ratelimit: 19 callbacks suppressed [ 772.019758] protocol 88fb is buggy, dev hsr_slave_0 [ 772.029933] protocol 88fb is buggy, dev hsr_slave_1 01:23:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) r1 = getpid() read(r0, &(0x7f0000000040)=""/11, 0x158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={r2}) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 01:23:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @raw_data="16981c3a8031bb24c900948d7ce7e3e413245eadbea67d8b016461128e2c0846c40f29cdbc6e2da0c7c171ef62715ccd066cfb9534772091f503c18db4c4ba88e6b29274d93a6bbaf00a1147e36215465f3ac58764b8cd0c61eab449e1bda0ac54ae57c2db10e50dd8979db13fc2c9958e77da50be270904f66cf66396be3234c08701c8700eaa2b4c5fd6d58b5717b59ae29e1c0b55eb3d3fb72d683890c57a1be6f56474c50ce463a033b136be346bfbb319ca1c6f1834ac4d05111c5f8cf1852720d307d2549b"}) 01:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0xae, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) 01:23:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @raw_data="16981c3a8031bb24c900948d7ce7e3e413245eadbea67d8b016461128e2c0846c40f29cdbc6e2da0c7c171ef62715ccd066cfb9534772091f503c18db4c4ba88e6b29274d93a6bbaf00a1147e36215465f3ac58764b8cd0c61eab449e1bda0ac54ae57c2db10e50dd8979db13fc2c9958e77da50be270904f66cf66396be3234c08701c8700eaa2b4c5fd6d58b5717b59ae29e1c0b55eb3d3fb72d683890c57a1be6f56474c50ce463a033b136be346bfbb319ca1c6f1834ac4d05111c5f8cf1852720d307d2549b"}) 01:23:07 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000, 0x1, &(0x7f0000000a80)=[{&(0x7f00000007c0)="73bb45135fd9e88ea7c52f8e2c2ca2297dd9ed7a1366c98399d6fcc27555853d576df16c63f357df45a0a4f6833d0a061481b001831a8f06e45cdcb3ca6eef22735fdd12e04105a363e7321bfc82bea4b515e957dcad8749d0a16fff283019509dc2086725f473132afec7bb650ecd6e6c1185da1e8ab160b711065226810afe1e59ad9d458b4f9d1651b3348b46502212218908f1e9c822ef7427c2283cfa0c9b224e1844d053", 0xa7, 0x2}], 0x0, 0x0) [ 772.218274] XFS (loop0): Invalid superblock magic number [ 772.226333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 772.295035] IPVS: persistence engine module ip_vs_pe_dip not found 01:23:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x357, 0x0}, 0xffffffffffffffdf) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) 01:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0xae, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) [ 772.339759] protocol 88fb is buggy, dev hsr_slave_0 [ 772.340226] protocol 88fb is buggy, dev hsr_slave_0 [ 772.344889] protocol 88fb is buggy, dev hsr_slave_1 [ 772.355354] protocol 88fb is buggy, dev hsr_slave_1 01:23:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x9, @raw_data="16981c3a8031bb24c900948d7ce7e3e413245eadbea67d8b016461128e2c0846c40f29cdbc6e2da0c7c171ef62715ccd066cfb9534772091f503c18db4c4ba88e6b29274d93a6bbaf00a1147e36215465f3ac58764b8cd0c61eab449e1bda0ac54ae57c2db10e50dd8979db13fc2c9958e77da50be270904f66cf66396be3234c08701c8700eaa2b4c5fd6d58b5717b59ae29e1c0b55eb3d3fb72d683890c57a1be6f56474c50ce463a033b136be346bfbb319ca1c6f1834ac4d05111c5f8cf1852720d307d2549b"}) [ 772.474613] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:23:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, 0x0, "ba7e305b22384b108388d9c36c33d1aac65804755ca97d0cd1b2412971046b90ce1ebd5e0d73b3bc146917d762360009e2ba8f50a5e71990db0af1cb609cfcf83cb080729bcdeffbe600f9937223e174"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) 01:23:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0xae, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) [ 772.531591] XFS (loop0): Invalid superblock magic number [ 772.551698] IPVS: persistence engine module ip_vs_pe_dip not found [ 772.705886] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 772.752059] IPVS: persistence engine module ip_vs_pe_dip not found 01:23:08 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 01:23:08 executing program 4: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:23:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000, 0x1, &(0x7f0000000a80)=[{&(0x7f00000007c0)="73bb45135fd9e88ea7c52f8e2c2ca2297dd9ed7a1366c98399d6fcc27555853d576df16c63f357df45a0a4f6833d0a061481b001831a8f06e45cdcb3ca6eef22735fdd12e04105a363e7321bfc82bea4b515e957dcad8749d0a16fff283019509dc2086725f473132afec7bb650ecd6e6c1185da1e8ab160b711065226810afe1e59ad9d458b4f9d1651b3348b46502212218908f1e9c822ef7427c2283cfa0c9b224e1844d053", 0xa7, 0x2}], 0x0, 0x0) 01:23:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ae", 0x1) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, 0x0}}, {{&(0x7f0000000080)=@hci, 0x80, 0x0}}], 0x2, 0x0) 01:23:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, 0x0, "ba7e305b22384b108388d9c36c33d1aac65804755ca97d0cd1b2412971046b90ce1ebd5e0d73b3bc146917d762360009e2ba8f50a5e71990db0af1cb609cfcf83cb080729bcdeffbe600f9937223e174"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) 01:23:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 01:23:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, 0x0, "ba7e305b22384b108388d9c36c33d1aac65804755ca97d0cd1b2412971046b90ce1ebd5e0d73b3bc146917d762360009e2ba8f50a5e71990db0af1cb609cfcf83cb080729bcdeffbe600f9937223e174"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) [ 773.150614] protocol 88fb is buggy, dev hsr_slave_0 [ 773.156232] protocol 88fb is buggy, dev hsr_slave_1 01:23:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ae", 0x1) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, 0x0}}, {{&(0x7f0000000080)=@hci, 0x80, 0x0}}], 0x2, 0x0) 01:23:08 executing program 4: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000400)=0xae) [ 773.276622] XFS (loop0): Invalid superblock magic number 01:23:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) [ 773.379790] protocol 88fb is buggy, dev hsr_slave_0 [ 773.384919] protocol 88fb is buggy, dev hsr_slave_1 01:23:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, 0x0, "ba7e305b22384b108388d9c36c33d1aac65804755ca97d0cd1b2412971046b90ce1ebd5e0d73b3bc146917d762360009e2ba8f50a5e71990db0af1cb609cfcf83cb080729bcdeffbe600f9937223e174"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x1, 0x0, "111d6c1ba6050dd77cf3f2f09d1cb02a25988f1ea9c5be7d9801641c99b0def45ac625ada3316175a9d341111c181811e12c196e1ab99946e5e47e0594e415670d1330cd611c3974c55bb4d50000e111"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "411b3f1c08455047284bea37cf1ab7534db964b7958943c7db1b29d39d5221fac53a751f6f97a5f406473879b8171ae0d09086cb18d602ee628a185531290242710b99b8401772c02989f80629dc1d9e"}, 0xd8) 01:23:08 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000, 0x1, &(0x7f0000000a80)=[{&(0x7f00000007c0)="73bb45135fd9e88ea7c52f8e2c2ca2297dd9ed7a1366c98399d6fcc27555853d576df16c63f357df45a0a4f6833d0a061481b001831a8f06e45cdcb3ca6eef22735fdd12e04105a363e7321bfc82bea4b515e957dcad8749d0a16fff283019509dc2086725f473132afec7bb650ecd6e6c1185da1e8ab160b711065226810afe1e59ad9d458b4f9d1651b3348b46502212218908f1e9c822ef7427c2283cfa0c9b224e1844d053", 0xa7, 0x2}], 0x0, 0x0) 01:23:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ae", 0x1) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, 0x0}}, {{&(0x7f0000000080)=@hci, 0x80, 0x0}}], 0x2, 0x0) 01:23:08 executing program 4: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:23:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close(r0) 01:23:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:23:08 executing program 4: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000400)=0xae) 01:23:08 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ae", 0x1) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, 0x0}}, {{&(0x7f0000000080)=@hci, 0x80, 0x0}}], 0x2, 0x0) 01:23:08 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) [ 773.865257] XFS (loop0): Invalid superblock magic number 01:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x1f}) 01:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x1f}) 01:23:09 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:09 executing program 1: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 01:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x1f}) 01:23:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 01:23:09 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x206c00, 0xffff) 01:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x1f}) 01:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:23:09 executing program 1: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:09 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 01:23:09 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x203e00, 0x800}, 0x18) 01:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:23:10 executing program 1: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 01:23:10 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x203e00, 0x800}, 0x18) 01:23:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 01:23:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 01:23:10 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x203e00, 0x800}, 0x18) 01:23:10 executing program 1: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:10 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="e1170521cf68a61d6920d06c05b58f20aa8b0ea1a13be733caf2ecf7ddcebf120fcdbe80dcfa824aad9cef31e76f59abf7efe6977d21302698468af94cffec21e85a57a8afeab773140fa436b0675655df2bb943c8c2cf776207f47cbc7c2135889838c21a7e85412bd31b8c4fc10e550916ba27015762b035e486802a87f1423ec74e029091a8a8bd251a1162a37e231af9e07c26668d9446d224cbe0b51e112cbd6d0c0c50a8d155842b16236a4360d4d5e4dc10261545fe497d4cd8ddb4bbc33c4551b597245c5b6dfc32ae90bc05187b0910b43a37dd7bbf133b7678a9ff376f7f6560bfb7b45a41b47c45c43dac0fae109f1ab94390cf463c18640d4ebb1264c1b41db568df0fed22af44c91a26cff73a187ec2701f6bc731547cef3bc92c6df2657fa5bc6b9f4921cfee8fc6b7eff55e8c824a3f5c9f8cd6b4c91fbbc9598f03cbba7ebc0d03b6c1ef931cfaaf93a2b86e4217bf609d8d3da877d88b86448646439229b4f3ca27650cf74777f95cdc880bdbdca7474f2b0f19", 0x17c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 01:23:10 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x203e00, 0x800}, 0x18) 01:23:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(0x0, 0xb9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={[], [], @local}, 0x68c}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, 0xffffffffffffffff, 0x3}}, 0x48) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x440000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:23:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 01:23:11 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000000)=[@enter_looper, @acquire_done={0x40106309, 0x0, 0x3}], 0x0, 0x0, 0x0}) 01:23:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 01:23:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:12 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 01:23:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 01:23:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:12 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 01:23:12 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) [ 777.301146] net_ratelimit: 20 callbacks suppressed [ 777.301212] protocol 88fb is buggy, dev hsr_slave_0 [ 777.311842] protocol 88fb is buggy, dev hsr_slave_1 [ 777.539830] protocol 88fb is buggy, dev hsr_slave_0 [ 777.541126] protocol 88fb is buggy, dev hsr_slave_0 [ 777.545430] protocol 88fb is buggy, dev hsr_slave_1 [ 777.550732] protocol 88fb is buggy, dev hsr_slave_1 01:23:12 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 01:23:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 01:23:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0xfffffebb) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) r4 = dup2(r3, r3) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 01:23:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ubifs\x00', 0x0, 0x0) 01:23:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)) 01:23:13 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:13 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) socket$l2tp(0x18, 0x1, 0x1) r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) [ 778.181625] UBIFS error (pid: 2427): cannot open "[0::]:4547:", error -22 [ 778.261275] protocol 88fb is buggy, dev hsr_slave_0 [ 778.266893] protocol 88fb is buggy, dev hsr_slave_1 01:23:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ubifs\x00', 0x0, 0x0) [ 778.579788] protocol 88fb is buggy, dev hsr_slave_0 [ 778.580473] protocol 88fb is buggy, dev hsr_slave_0 01:23:13 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:13 executing program 5: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:13 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ubifs\x00', 0x0, 0x0) 01:23:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) [ 779.381201] UBIFS error (pid: 3145): cannot open "[0::]:4547:", error -22 01:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ubifs\x00', 0x0, 0x0) 01:23:14 executing program 5: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) 01:23:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x2c, 0x4, {"803917d00b77497205125d1d4931c44210"}}}, 0x0, 0x2e}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:23:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) [ 779.963374] UBIFS error (pid: 3222): cannot open "[0::]:4547:", error -22 01:23:15 executing program 5: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:15 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) [ 780.923170] audit: type=1400 audit(1555464195.989:344): avc: denied { sys_ptrace } for pid=2814 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 01:23:16 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) 01:23:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c000000, 0x10a000d07) 01:23:16 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:16 executing program 5: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:16 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x100000001, @remote}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:23:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c000000, 0x10a000d07) 01:23:16 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:16 executing program 5: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:16 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c000000, 0x10a000d07) 01:23:17 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 5: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c000000, 0x10a000d07) 01:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:17 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 5: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:17 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 782.339840] net_ratelimit: 18 callbacks suppressed [ 782.339848] protocol 88fb is buggy, dev hsr_slave_0 [ 782.349972] protocol 88fb is buggy, dev hsr_slave_1 01:23:17 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 01:23:17 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:17 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) 01:23:17 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) [ 782.669744] protocol 88fb is buggy, dev hsr_slave_0 [ 782.675351] protocol 88fb is buggy, dev hsr_slave_1 01:23:17 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed0", 0x4a}], 0x1}, 0x0) [ 782.739825] protocol 88fb is buggy, dev hsr_slave_0 [ 782.739983] protocol 88fb is buggy, dev hsr_slave_0 [ 782.744982] protocol 88fb is buggy, dev hsr_slave_1 [ 782.750003] protocol 88fb is buggy, dev hsr_slave_1 01:23:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ppoll(&(0x7f0000000140)=[{r1}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 01:23:18 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79f9, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, 0x0) 01:23:18 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) [ 783.291201] audit: type=1804 audit(1555464198.349:345): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir759471447/syzkaller.MfOTc5/1462/file0" dev="sda1" ino=16960 res=1 01:23:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ppoll(&(0x7f0000000140)=[{r1}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 01:23:18 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) 01:23:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:18 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79f9, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, 0x0) [ 783.539774] protocol 88fb is buggy, dev hsr_slave_0 [ 783.545495] protocol 88fb is buggy, dev hsr_slave_1 [ 783.692124] audit: type=1804 audit(1555464198.759:346): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir759471447/syzkaller.MfOTc5/1463/file0" dev="sda1" ino=16960 res=1 01:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ppoll(&(0x7f0000000140)=[{r1}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 01:23:18 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79f9, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, 0x0) 01:23:18 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) [ 783.914082] audit: type=1804 audit(1555464198.979:347): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir759471447/syzkaller.MfOTc5/1464/file0" dev="sda1" ino=16969 res=1 01:23:19 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79f9, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, 0x0) 01:23:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "f8e18fa7eb45fd12d0600e3a2e422207428064d985ea01b65a462af7d7bcaea81ccc25a0f3eebcbd9d7ea3dd90ada77edbe4e00e4ec226ccfa38c37b4c3bfadcd387b0c0b38bb85b6ef9a6eef2a99d7465889d318f68c953f9e13417969b94652fa957344c7b92880e856ec538c5f9437fdbf3632590f2cd36deff8a9a4f5f3ace61e905213ffd73833b515f16ed7976e9a53c05a0d85a62ee9925c164f280120e2f196ab16ba49ec7a97826ae13df6d3e955201f4d382818832e179c6e6ec1d58b000a1ea9f58408634869002421a8d0dcd8456c4a170a693f12df95e7aae0d3aabaaecca25c951620a6e1a89b52321f30af52132cf5e3bcdb412a89e432cdb805a73f0332df7de0651949de75304d686aa1544b68af558af05cf4015c50fd132c3ccc35da35fcbb023b4f7f7142493622a7e97229a0b488a415631825825f497b502bcfcb5d9790ad3805a05509b33d66b199bc679ce978e0650d5ebff390281c041f54a3514e84a62690ecf228ff11e2f8b9127b23f2055ce6af31d23c2884d9e5ea195f1e047a7ee7e8090fc87f6d4ba7eb566b213b5655ee0572bfd991ffcb95bd291a329f69888a4ae1c69c318c8e719a35fb08e2837516f6610f1611fc933a32d7a220c3554202f1431142a7ae890c33046425c06f2e399e130b166f3cff84a22395134e5fe393aa3b90af96e017d392bbb6b4ecb2105ea994685b41f15a18f37c4f837b7ac89c2d55a15d916405d3225dffd826ac365fe361f8b75e6d26ce0cd16dea8a5188c414777a105c6cbb4d0dd14f13cf60e50a7166203e53f6564070ada6113341ab253852edcb1a094f895e00616395de3bc1a5f3819399415661205e1c38c9ef79c407f180e067b82e69ac7df4beb6f2f745a41ca7ecbabbe43cf7e80e46fdc9ef9acfaa0c5a19d6c2eadac64bcbdda806a6acabc8ad85a7e857a31401e0e82ae0b4dd300c972fea799eaeb3b5bf623d7cc9f3b49b1cff2c2201c661ff2399caea616a72c0a34e0fbbc97c8bd6def431453aac964914ef9dcd295e46f44b6df414343b0cfa92850990cfdeafb94b4237f23fb9e96391c089e1be8eb965f0a15749a2c99ad26f2f2b468a3830b4679c0e98e0389bb473332c641fe1dc4373e089e49f601783a1883b356c2a46e87853b974585a0c126ae3f7275a19b02de429f007c6b30cb8524d9495b863ada399ce0e92d5af1c85ab832fb07e9c90dfdf540af775a01b23df0c03f2baac88fd61c3ba3c7dd564428df393f4faaf76a3f169b92e46c5155ee112dd63cdbf1188c2dfa1ef42a2e53c5b938536eeaa9613d35c8ad00c56f1b58beafc5982140ab0eb59c88ffe139d23acbf3bfe98f34215043408641da6f5ed9a3ed214db244185e128f6a189a33caee92827e595d2cba9eb4963292d43bc5eb8723b35a87fb9783f91b3e229a6fae68c92409f4de8f8e258a4cab23d117085a52e4f0b8be479c25884266e4013c8a0e45bc2658951ea6187ccee019a2349ee6c21bc28a714460213e30ec382b27b2df2de77bfe79fcf6a26c8374d1e93eaabb94b0bdaca15d0750aa64a5eb16b2b680a53a7bd9924a3212f0496aac02b506a271f88f2e2dc8c69068b8a6adae798c2823c22c1ff8c1a7377c34c8e50e55f749efabee102cbfe8a63524ec3aface543b2e7692de47b6532cc147ac7279580b05664d31e84ef1c09b9b1885c85ffe8855ecd315d89d020338adad39c97ef947d9b64eda59b06e7f0dbf72b5e082a5ed29856131f1cc3228883bb08917133af96c8cffb02c05c1e9777834019c5d91c59e4506a82d8cc719a505a8278cf59b38206771bef3e01aea854962194b5f1bc9d74c15050d1ede39d6c137e87d8b2d47bfee4078bd20538c955b91228be206c5eddf9eed586ee188160180732fe9fad1da2fc6f379e97590aac6eca66f708078c6c433cba59838bd11661efed185c4d8a9725aa21e5d9d90acd2dad76e35befc39d437398e4cf200059807029cae26b4a5acd719efc466482d7213794e86d07ba68962208fab2f9d2b4636a1586bc654791478d2181821efef0daa74076342b3c43762541bb25cefb6dc4a90dfc9123b78152cfec0a12cd91f735174161fc3222712f59d84511aae95a952562132d894fe575b9e0de3e5bf55835aa5b4466600b2a5df6d9bd667ff1f3f2635c60b79e9834d0b9eca6e38d6cf428da708c5c7d50414275a4d28016a2ec6cfa4f3babef56cc56e63b752373c4b652c5082b0561cd9416d9ad6eadaf1402c8e23f7c6a8f24d1093f875530664823240a20d9e97639aff38bbd208779b1bf7710f788778dacbabb5eb8aed355d4553cd02000e0fd21e6599b2383d03b60d7ab3f379a2d3a5be5596c1abd3ac133e35843f2ec36105e18d28d593ebba09b5b0e7e5628d308b1056470ec2edb380478feb22b80a2146f9b38f5164624a34e038775677bc6ae425bdc69081e379ec576f82f83e59563b5f3b424cf782486455533b37826c170c11d20005ca4339c1e4ba958c51ef8613c275e93ae5c33611809c2fcc1f0d516b66ffd6c8bc8d96039a38c4ee95c494ced55663e43bcc7270847c7c5725020da08c52ee800abca80e29a07bb02699a7e77acef6602fea7ac078fcef4363bdaac2a8d8f19a9f98d3526a752e2a81888b473854b9c1853d6dac692a59cc97a8d7b7cb0bbd2c9becf3fde47e10bd6f93505026e0b0c20a68260b1f7c3c4a8e2d55cec15fde56d38cc999119e9d3ed68068c0845c43ef308c5bc215bea8b42929943c34a880a1bf087c65cfa1575756e205f7504322eca7fbaac4e7668ebda77ce3cab95456aeae02f3f606ba10e58c35b8a4b85cf755dc73e47e855f711fa7650dfce7365431105dcb75d769cd89bd52e7be9673f390b1f9e164081a5ceef71744ff273b48015207b3261e2a11363061c016a2c854f27a197c4ddfe5c8a4b8a8000de40155238568a591e3d6f19377e92434b381f073d1256a3db77cf79de2fe2da63fd66c034315a9cf43d3a2a389c9bd5c6888468d700797f39290abf536fa710f9444f2832fbd143deef7d261925f7edbcbf2650a559c5721c3b42204772d88bd159544681441a572714bccbffbe54a2f0f2ff9b541ad7e0ac6a0c294057e73b6d11855b84336f1def45561b653c08c2f3b6d6453aa37a3985d41b1cfdfcfbcd1a3052eaddadd58ef18b4698eccb64f013052068febb2b90171b9ae898860da77f94f1ea228888723b3099fa0e3086aef890f0ce71ccb678026be4e2f16eedef715dd82b57d647a29f4f43c14f9195e3db3b78cad649c3b935e968188f39b46e5d36959d6d5f305d4bc62dd07fe0fe35f48264d4ca6ceccfbe51f0d74ff8ef53506b387bbb70be74ef84d08488c6912f01c281052c67926296c739fc1b0db35245c3f50031a070b322b577f40b9cbc94766f8282e50a12e98ba6b4ef8649fff0a2eba7370c7fdab80c23e64499d1f15038b0cf574528f011e6e608f307ca5a7f20801c9994d14ffe880f4ca431d91c5ab0b8bd9daf6b0e25b084d21f85f2a78583af99a00409d3488166dfe20632f1fe3b154c8391600e8786c54fff8bc228510610ea9d91bb54bcb9f0ff8840af1215fd43d3e4f2f844b9ce25cbec8c978459f980ab1cbf0993137227d16a4111ce62e3b37ca2ab02729618f82b1e391dce4179209653bb05793424e6f7c0dbeac3fff42cabe354aba718b332e81856d0b0bcb969d575eaa7144a464b3a9cbc7e74d8ca9f94439b49870ef69543b0060d1693a2b642a62597a9f45547eaad02370f2d8edb131cb1c9655ea18f4fb38e9bad8ad49bb1cad97f633116fabfec5e188d3b38c1f2e4496323b62fdb9db4748cbc654d9f70f3989fc5f45f1100319f93a02107b4f8e3aa0e50892792be9013e8fa05aeffe0f09980aeed153dbafb357dd06444aa004ef9d97bef73c3971764eecec3479f6bcdd7bbb725ac43914fbdd065195405ac3ea879ac0116b62a4fe037da8f37729f68185216240f14313118955a7810dfc5d5b0394318e79d44df573ceed89346ae5a40709174115f8107e9ae0de146a989851ee695805fcfcf8056d9823394f616de7bed1dd2595d2ce648ed8fb95dba385742912f16a62b3e2bfb9a5df626a2bafc29e2ec164e3a6693519be0f1cf1b8128eff950dfedcd5069d6b6956c541468707bf226b114df6fbfa48cc1921d49708c27c64f219317d20fe54d7beda6614dae5507d8133af050168b15abbe27ce949d6b2b026ccb891d2b3f52f5f5f4fcb52a942ab1833e9f96ca3cc08d60653172c60abc6a3a83ca1d3145357e834ffbd11cbec48188136a1820f9663ef78406e6a0f6c7ddae1bb536990a185f95a9609f311ff8782410635a6c18fc928b37e5104ec32687c6b8d133c723b02ade27aa8fc9df9371c48fb78f5b02593b29fddfca3fba5f082849615f0cda020f13f221472b4073934f815f48103f78ff8f7768db09d6b0a6ebf82539b97dcd377939f8c6f760e5a4914e87958f4dc9fd41a9a345560eac79051e7958afa12fed6a12557f4c2e593d75b6d58e2c449aa689990007cd1c130ad9f40ce7b69055498b0bf2bf5b233c00857ccda48e7e6a16367d4ab4d8f7ec06cea88eb06623a1a94e747a64ca35052f57a4a6261f524e7074c1080976f3f97963027e532555da4b61fc26fc5c456ded812543b67b49c270a74542d02a7fd28aa153a12e9cada5cb7c96f50a8f30bcbc2cbf2bf6d63cba49574a9254394f60819fc6cf037e4502f2318b18d5a9df72139cf463dc794504246f8827e989935b82e59816dee439c12c82b959ad91eb7174a46bdaa11ced3f1b5319ae6fffa4ec84b9f5ab9f384809f8270216d0f36becd4a5f03956424ed84548590fce8720a3fe8c3e8356fccc3ca2908847fd95c6a0109a64af81324dbf012413abea8e22b3e98d358665e505d6ce4b7fbfde73ba39f5643710e33"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:19 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000700)={0xe563, 0x3f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r1, 0x2, &(0x7f0000000800)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000300)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="d2dc1bf557c5cf0b46610f02557aba4dc48e6d6ef9bda472d347875743ac9429209bb26efefe29ae78e8243f8fae7467ed9b098bef3e38c926e6025db976f1017ecee8db18b9801145891950b3c5fbdacd38c54a7d693cdd39a4f6012fd64212e641dcd846a24148d55f773ca48c6f4c15dbda1c35881c8b240e0c99647c3a7a62add2a9ccb59372672758e30d12f0343d323fd24205bb6eea919bd9a9c1cae234b993cc9cdbc4e006463c4bb7432dd1b5f9560c03a427826ccf97b1313e7bb4d677eafcf839dde9c5fc6c80b47398acd7371f3951fd509f4a4c", 0xda}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa7089fdedaf3de2b, 0x0) [ 784.336882] audit: type=1804 audit(1555464199.399:348): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir759471447/syzkaller.MfOTc5/1465/file0" dev="sda1" ino=17952 res=1 01:23:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ppoll(&(0x7f0000000140)=[{r1}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 01:23:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "f8e18fa7eb45fd12d0600e3a2e422207428064d985ea01b65a462af7d7bcaea81ccc25a0f3eebcbd9d7ea3dd90ada77edbe4e00e4ec226ccfa38c37b4c3bfadcd387b0c0b38bb85b6ef9a6eef2a99d7465889d318f68c953f9e13417969b94652fa957344c7b92880e856ec538c5f9437fdbf3632590f2cd36deff8a9a4f5f3ace61e905213ffd73833b515f16ed7976e9a53c05a0d85a62ee9925c164f280120e2f196ab16ba49ec7a97826ae13df6d3e955201f4d382818832e179c6e6ec1d58b000a1ea9f58408634869002421a8d0dcd8456c4a170a693f12df95e7aae0d3aabaaecca25c951620a6e1a89b52321f30af52132cf5e3bcdb412a89e432cdb805a73f0332df7de0651949de75304d686aa1544b68af558af05cf4015c50fd132c3ccc35da35fcbb023b4f7f7142493622a7e97229a0b488a415631825825f497b502bcfcb5d9790ad3805a05509b33d66b199bc679ce978e0650d5ebff390281c041f54a3514e84a62690ecf228ff11e2f8b9127b23f2055ce6af31d23c2884d9e5ea195f1e047a7ee7e8090fc87f6d4ba7eb566b213b5655ee0572bfd991ffcb95bd291a329f69888a4ae1c69c318c8e719a35fb08e2837516f6610f1611fc933a32d7a220c3554202f1431142a7ae890c33046425c06f2e399e130b166f3cff84a22395134e5fe393aa3b90af96e017d392bbb6b4ecb2105ea994685b41f15a18f37c4f837b7ac89c2d55a15d916405d3225dffd826ac365fe361f8b75e6d26ce0cd16dea8a5188c414777a105c6cbb4d0dd14f13cf60e50a7166203e53f6564070ada6113341ab253852edcb1a094f895e00616395de3bc1a5f3819399415661205e1c38c9ef79c407f180e067b82e69ac7df4beb6f2f745a41ca7ecbabbe43cf7e80e46fdc9ef9acfaa0c5a19d6c2eadac64bcbdda806a6acabc8ad85a7e857a31401e0e82ae0b4dd300c972fea799eaeb3b5bf623d7cc9f3b49b1cff2c2201c661ff2399caea616a72c0a34e0fbbc97c8bd6def431453aac964914ef9dcd295e46f44b6df414343b0cfa92850990cfdeafb94b4237f23fb9e96391c089e1be8eb965f0a15749a2c99ad26f2f2b468a3830b4679c0e98e0389bb473332c641fe1dc4373e089e49f601783a1883b356c2a46e87853b974585a0c126ae3f7275a19b02de429f007c6b30cb8524d9495b863ada399ce0e92d5af1c85ab832fb07e9c90dfdf540af775a01b23df0c03f2baac88fd61c3ba3c7dd564428df393f4faaf76a3f169b92e46c5155ee112dd63cdbf1188c2dfa1ef42a2e53c5b938536eeaa9613d35c8ad00c56f1b58beafc5982140ab0eb59c88ffe139d23acbf3bfe98f34215043408641da6f5ed9a3ed214db244185e128f6a189a33caee92827e595d2cba9eb4963292d43bc5eb8723b35a87fb9783f91b3e229a6fae68c92409f4de8f8e258a4cab23d117085a52e4f0b8be479c25884266e4013c8a0e45bc2658951ea6187ccee019a2349ee6c21bc28a714460213e30ec382b27b2df2de77bfe79fcf6a26c8374d1e93eaabb94b0bdaca15d0750aa64a5eb16b2b680a53a7bd9924a3212f0496aac02b506a271f88f2e2dc8c69068b8a6adae798c2823c22c1ff8c1a7377c34c8e50e55f749efabee102cbfe8a63524ec3aface543b2e7692de47b6532cc147ac7279580b05664d31e84ef1c09b9b1885c85ffe8855ecd315d89d020338adad39c97ef947d9b64eda59b06e7f0dbf72b5e082a5ed29856131f1cc3228883bb08917133af96c8cffb02c05c1e9777834019c5d91c59e4506a82d8cc719a505a8278cf59b38206771bef3e01aea854962194b5f1bc9d74c15050d1ede39d6c137e87d8b2d47bfee4078bd20538c955b91228be206c5eddf9eed586ee188160180732fe9fad1da2fc6f379e97590aac6eca66f708078c6c433cba59838bd11661efed185c4d8a9725aa21e5d9d90acd2dad76e35befc39d437398e4cf200059807029cae26b4a5acd719efc466482d7213794e86d07ba68962208fab2f9d2b4636a1586bc654791478d2181821efef0daa74076342b3c43762541bb25cefb6dc4a90dfc9123b78152cfec0a12cd91f735174161fc3222712f59d84511aae95a952562132d894fe575b9e0de3e5bf55835aa5b4466600b2a5df6d9bd667ff1f3f2635c60b79e9834d0b9eca6e38d6cf428da708c5c7d50414275a4d28016a2ec6cfa4f3babef56cc56e63b752373c4b652c5082b0561cd9416d9ad6eadaf1402c8e23f7c6a8f24d1093f875530664823240a20d9e97639aff38bbd208779b1bf7710f788778dacbabb5eb8aed355d4553cd02000e0fd21e6599b2383d03b60d7ab3f379a2d3a5be5596c1abd3ac133e35843f2ec36105e18d28d593ebba09b5b0e7e5628d308b1056470ec2edb380478feb22b80a2146f9b38f5164624a34e038775677bc6ae425bdc69081e379ec576f82f83e59563b5f3b424cf782486455533b37826c170c11d20005ca4339c1e4ba958c51ef8613c275e93ae5c33611809c2fcc1f0d516b66ffd6c8bc8d96039a38c4ee95c494ced55663e43bcc7270847c7c5725020da08c52ee800abca80e29a07bb02699a7e77acef6602fea7ac078fcef4363bdaac2a8d8f19a9f98d3526a752e2a81888b473854b9c1853d6dac692a59cc97a8d7b7cb0bbd2c9becf3fde47e10bd6f93505026e0b0c20a68260b1f7c3c4a8e2d55cec15fde56d38cc999119e9d3ed68068c0845c43ef308c5bc215bea8b42929943c34a880a1bf087c65cfa1575756e205f7504322eca7fbaac4e7668ebda77ce3cab95456aeae02f3f606ba10e58c35b8a4b85cf755dc73e47e855f711fa7650dfce7365431105dcb75d769cd89bd52e7be9673f390b1f9e164081a5ceef71744ff273b48015207b3261e2a11363061c016a2c854f27a197c4ddfe5c8a4b8a8000de40155238568a591e3d6f19377e92434b381f073d1256a3db77cf79de2fe2da63fd66c034315a9cf43d3a2a389c9bd5c6888468d700797f39290abf536fa710f9444f2832fbd143deef7d261925f7edbcbf2650a559c5721c3b42204772d88bd159544681441a572714bccbffbe54a2f0f2ff9b541ad7e0ac6a0c294057e73b6d11855b84336f1def45561b653c08c2f3b6d6453aa37a3985d41b1cfdfcfbcd1a3052eaddadd58ef18b4698eccb64f013052068febb2b90171b9ae898860da77f94f1ea228888723b3099fa0e3086aef890f0ce71ccb678026be4e2f16eedef715dd82b57d647a29f4f43c14f9195e3db3b78cad649c3b935e968188f39b46e5d36959d6d5f305d4bc62dd07fe0fe35f48264d4ca6ceccfbe51f0d74ff8ef53506b387bbb70be74ef84d08488c6912f01c281052c67926296c739fc1b0db35245c3f50031a070b322b577f40b9cbc94766f8282e50a12e98ba6b4ef8649fff0a2eba7370c7fdab80c23e64499d1f15038b0cf574528f011e6e608f307ca5a7f20801c9994d14ffe880f4ca431d91c5ab0b8bd9daf6b0e25b084d21f85f2a78583af99a00409d3488166dfe20632f1fe3b154c8391600e8786c54fff8bc228510610ea9d91bb54bcb9f0ff8840af1215fd43d3e4f2f844b9ce25cbec8c978459f980ab1cbf0993137227d16a4111ce62e3b37ca2ab02729618f82b1e391dce4179209653bb05793424e6f7c0dbeac3fff42cabe354aba718b332e81856d0b0bcb969d575eaa7144a464b3a9cbc7e74d8ca9f94439b49870ef69543b0060d1693a2b642a62597a9f45547eaad02370f2d8edb131cb1c9655ea18f4fb38e9bad8ad49bb1cad97f633116fabfec5e188d3b38c1f2e4496323b62fdb9db4748cbc654d9f70f3989fc5f45f1100319f93a02107b4f8e3aa0e50892792be9013e8fa05aeffe0f09980aeed153dbafb357dd06444aa004ef9d97bef73c3971764eecec3479f6bcdd7bbb725ac43914fbdd065195405ac3ea879ac0116b62a4fe037da8f37729f68185216240f14313118955a7810dfc5d5b0394318e79d44df573ceed89346ae5a40709174115f8107e9ae0de146a989851ee695805fcfcf8056d9823394f616de7bed1dd2595d2ce648ed8fb95dba385742912f16a62b3e2bfb9a5df626a2bafc29e2ec164e3a6693519be0f1cf1b8128eff950dfedcd5069d6b6956c541468707bf226b114df6fbfa48cc1921d49708c27c64f219317d20fe54d7beda6614dae5507d8133af050168b15abbe27ce949d6b2b026ccb891d2b3f52f5f5f4fcb52a942ab1833e9f96ca3cc08d60653172c60abc6a3a83ca1d3145357e834ffbd11cbec48188136a1820f9663ef78406e6a0f6c7ddae1bb536990a185f95a9609f311ff8782410635a6c18fc928b37e5104ec32687c6b8d133c723b02ade27aa8fc9df9371c48fb78f5b02593b29fddfca3fba5f082849615f0cda020f13f221472b4073934f815f48103f78ff8f7768db09d6b0a6ebf82539b97dcd377939f8c6f760e5a4914e87958f4dc9fd41a9a345560eac79051e7958afa12fed6a12557f4c2e593d75b6d58e2c449aa689990007cd1c130ad9f40ce7b69055498b0bf2bf5b233c00857ccda48e7e6a16367d4ab4d8f7ec06cea88eb06623a1a94e747a64ca35052f57a4a6261f524e7074c1080976f3f97963027e532555da4b61fc26fc5c456ded812543b67b49c270a74542d02a7fd28aa153a12e9cada5cb7c96f50a8f30bcbc2cbf2bf6d63cba49574a9254394f60819fc6cf037e4502f2318b18d5a9df72139cf463dc794504246f8827e989935b82e59816dee439c12c82b959ad91eb7174a46bdaa11ced3f1b5319ae6fffa4ec84b9f5ab9f384809f8270216d0f36becd4a5f03956424ed84548590fce8720a3fe8c3e8356fccc3ca2908847fd95c6a0109a64af81324dbf012413abea8e22b3e98d358665e505d6ce4b7fbfde73ba39f5643710e33"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 01:23:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 01:23:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 01:23:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "f8e18fa7eb45fd12d0600e3a2e422207428064d985ea01b65a462af7d7bcaea81ccc25a0f3eebcbd9d7ea3dd90ada77edbe4e00e4ec226ccfa38c37b4c3bfadcd387b0c0b38bb85b6ef9a6eef2a99d7465889d318f68c953f9e13417969b94652fa957344c7b92880e856ec538c5f9437fdbf3632590f2cd36deff8a9a4f5f3ace61e905213ffd73833b515f16ed7976e9a53c05a0d85a62ee9925c164f280120e2f196ab16ba49ec7a97826ae13df6d3e955201f4d382818832e179c6e6ec1d58b000a1ea9f58408634869002421a8d0dcd8456c4a170a693f12df95e7aae0d3aabaaecca25c951620a6e1a89b52321f30af52132cf5e3bcdb412a89e432cdb805a73f0332df7de0651949de75304d686aa1544b68af558af05cf4015c50fd132c3ccc35da35fcbb023b4f7f7142493622a7e97229a0b488a415631825825f497b502bcfcb5d9790ad3805a05509b33d66b199bc679ce978e0650d5ebff390281c041f54a3514e84a62690ecf228ff11e2f8b9127b23f2055ce6af31d23c2884d9e5ea195f1e047a7ee7e8090fc87f6d4ba7eb566b213b5655ee0572bfd991ffcb95bd291a329f69888a4ae1c69c318c8e719a35fb08e2837516f6610f1611fc933a32d7a220c3554202f1431142a7ae890c33046425c06f2e399e130b166f3cff84a22395134e5fe393aa3b90af96e017d392bbb6b4ecb2105ea994685b41f15a18f37c4f837b7ac89c2d55a15d916405d3225dffd826ac365fe361f8b75e6d26ce0cd16dea8a5188c414777a105c6cbb4d0dd14f13cf60e50a7166203e53f6564070ada6113341ab253852edcb1a094f895e00616395de3bc1a5f3819399415661205e1c38c9ef79c407f180e067b82e69ac7df4beb6f2f745a41ca7ecbabbe43cf7e80e46fdc9ef9acfaa0c5a19d6c2eadac64bcbdda806a6acabc8ad85a7e857a31401e0e82ae0b4dd300c972fea799eaeb3b5bf623d7cc9f3b49b1cff2c2201c661ff2399caea616a72c0a34e0fbbc97c8bd6def431453aac964914ef9dcd295e46f44b6df414343b0cfa92850990cfdeafb94b4237f23fb9e96391c089e1be8eb965f0a15749a2c99ad26f2f2b468a3830b4679c0e98e0389bb473332c641fe1dc4373e089e49f601783a1883b356c2a46e87853b974585a0c126ae3f7275a19b02de429f007c6b30cb8524d9495b863ada399ce0e92d5af1c85ab832fb07e9c90dfdf540af775a01b23df0c03f2baac88fd61c3ba3c7dd564428df393f4faaf76a3f169b92e46c5155ee112dd63cdbf1188c2dfa1ef42a2e53c5b938536eeaa9613d35c8ad00c56f1b58beafc5982140ab0eb59c88ffe139d23acbf3bfe98f34215043408641da6f5ed9a3ed214db244185e128f6a189a33caee92827e595d2cba9eb4963292d43bc5eb8723b35a87fb9783f91b3e229a6fae68c92409f4de8f8e258a4cab23d117085a52e4f0b8be479c25884266e4013c8a0e45bc2658951ea6187ccee019a2349ee6c21bc28a714460213e30ec382b27b2df2de77bfe79fcf6a26c8374d1e93eaabb94b0bdaca15d0750aa64a5eb16b2b680a53a7bd9924a3212f0496aac02b506a271f88f2e2dc8c69068b8a6adae798c2823c22c1ff8c1a7377c34c8e50e55f749efabee102cbfe8a63524ec3aface543b2e7692de47b6532cc147ac7279580b05664d31e84ef1c09b9b1885c85ffe8855ecd315d89d020338adad39c97ef947d9b64eda59b06e7f0dbf72b5e082a5ed29856131f1cc3228883bb08917133af96c8cffb02c05c1e9777834019c5d91c59e4506a82d8cc719a505a8278cf59b38206771bef3e01aea854962194b5f1bc9d74c15050d1ede39d6c137e87d8b2d47bfee4078bd20538c955b91228be206c5eddf9eed586ee188160180732fe9fad1da2fc6f379e97590aac6eca66f708078c6c433cba59838bd11661efed185c4d8a9725aa21e5d9d90acd2dad76e35befc39d437398e4cf200059807029cae26b4a5acd719efc466482d7213794e86d07ba68962208fab2f9d2b4636a1586bc654791478d2181821efef0daa74076342b3c43762541bb25cefb6dc4a90dfc9123b78152cfec0a12cd91f735174161fc3222712f59d84511aae95a952562132d894fe575b9e0de3e5bf55835aa5b4466600b2a5df6d9bd667ff1f3f2635c60b79e9834d0b9eca6e38d6cf428da708c5c7d50414275a4d28016a2ec6cfa4f3babef56cc56e63b752373c4b652c5082b0561cd9416d9ad6eadaf1402c8e23f7c6a8f24d1093f875530664823240a20d9e97639aff38bbd208779b1bf7710f788778dacbabb5eb8aed355d4553cd02000e0fd21e6599b2383d03b60d7ab3f379a2d3a5be5596c1abd3ac133e35843f2ec36105e18d28d593ebba09b5b0e7e5628d308b1056470ec2edb380478feb22b80a2146f9b38f5164624a34e038775677bc6ae425bdc69081e379ec576f82f83e59563b5f3b424cf782486455533b37826c170c11d20005ca4339c1e4ba958c51ef8613c275e93ae5c33611809c2fcc1f0d516b66ffd6c8bc8d96039a38c4ee95c494ced55663e43bcc7270847c7c5725020da08c52ee800abca80e29a07bb02699a7e77acef6602fea7ac078fcef4363bdaac2a8d8f19a9f98d3526a752e2a81888b473854b9c1853d6dac692a59cc97a8d7b7cb0bbd2c9becf3fde47e10bd6f93505026e0b0c20a68260b1f7c3c4a8e2d55cec15fde56d38cc999119e9d3ed68068c0845c43ef308c5bc215bea8b42929943c34a880a1bf087c65cfa1575756e205f7504322eca7fbaac4e7668ebda77ce3cab95456aeae02f3f606ba10e58c35b8a4b85cf755dc73e47e855f711fa7650dfce7365431105dcb75d769cd89bd52e7be9673f390b1f9e164081a5ceef71744ff273b48015207b3261e2a11363061c016a2c854f27a197c4ddfe5c8a4b8a8000de40155238568a591e3d6f19377e92434b381f073d1256a3db77cf79de2fe2da63fd66c034315a9cf43d3a2a389c9bd5c6888468d700797f39290abf536fa710f9444f2832fbd143deef7d261925f7edbcbf2650a559c5721c3b42204772d88bd159544681441a572714bccbffbe54a2f0f2ff9b541ad7e0ac6a0c294057e73b6d11855b84336f1def45561b653c08c2f3b6d6453aa37a3985d41b1cfdfcfbcd1a3052eaddadd58ef18b4698eccb64f013052068febb2b90171b9ae898860da77f94f1ea228888723b3099fa0e3086aef890f0ce71ccb678026be4e2f16eedef715dd82b57d647a29f4f43c14f9195e3db3b78cad649c3b935e968188f39b46e5d36959d6d5f305d4bc62dd07fe0fe35f48264d4ca6ceccfbe51f0d74ff8ef53506b387bbb70be74ef84d08488c6912f01c281052c67926296c739fc1b0db35245c3f50031a070b322b577f40b9cbc94766f8282e50a12e98ba6b4ef8649fff0a2eba7370c7fdab80c23e64499d1f15038b0cf574528f011e6e608f307ca5a7f20801c9994d14ffe880f4ca431d91c5ab0b8bd9daf6b0e25b084d21f85f2a78583af99a00409d3488166dfe20632f1fe3b154c8391600e8786c54fff8bc228510610ea9d91bb54bcb9f0ff8840af1215fd43d3e4f2f844b9ce25cbec8c978459f980ab1cbf0993137227d16a4111ce62e3b37ca2ab02729618f82b1e391dce4179209653bb05793424e6f7c0dbeac3fff42cabe354aba718b332e81856d0b0bcb969d575eaa7144a464b3a9cbc7e74d8ca9f94439b49870ef69543b0060d1693a2b642a62597a9f45547eaad02370f2d8edb131cb1c9655ea18f4fb38e9bad8ad49bb1cad97f633116fabfec5e188d3b38c1f2e4496323b62fdb9db4748cbc654d9f70f3989fc5f45f1100319f93a02107b4f8e3aa0e50892792be9013e8fa05aeffe0f09980aeed153dbafb357dd06444aa004ef9d97bef73c3971764eecec3479f6bcdd7bbb725ac43914fbdd065195405ac3ea879ac0116b62a4fe037da8f37729f68185216240f14313118955a7810dfc5d5b0394318e79d44df573ceed89346ae5a40709174115f8107e9ae0de146a989851ee695805fcfcf8056d9823394f616de7bed1dd2595d2ce648ed8fb95dba385742912f16a62b3e2bfb9a5df626a2bafc29e2ec164e3a6693519be0f1cf1b8128eff950dfedcd5069d6b6956c541468707bf226b114df6fbfa48cc1921d49708c27c64f219317d20fe54d7beda6614dae5507d8133af050168b15abbe27ce949d6b2b026ccb891d2b3f52f5f5f4fcb52a942ab1833e9f96ca3cc08d60653172c60abc6a3a83ca1d3145357e834ffbd11cbec48188136a1820f9663ef78406e6a0f6c7ddae1bb536990a185f95a9609f311ff8782410635a6c18fc928b37e5104ec32687c6b8d133c723b02ade27aa8fc9df9371c48fb78f5b02593b29fddfca3fba5f082849615f0cda020f13f221472b4073934f815f48103f78ff8f7768db09d6b0a6ebf82539b97dcd377939f8c6f760e5a4914e87958f4dc9fd41a9a345560eac79051e7958afa12fed6a12557f4c2e593d75b6d58e2c449aa689990007cd1c130ad9f40ce7b69055498b0bf2bf5b233c00857ccda48e7e6a16367d4ab4d8f7ec06cea88eb06623a1a94e747a64ca35052f57a4a6261f524e7074c1080976f3f97963027e532555da4b61fc26fc5c456ded812543b67b49c270a74542d02a7fd28aa153a12e9cada5cb7c96f50a8f30bcbc2cbf2bf6d63cba49574a9254394f60819fc6cf037e4502f2318b18d5a9df72139cf463dc794504246f8827e989935b82e59816dee439c12c82b959ad91eb7174a46bdaa11ced3f1b5319ae6fffa4ec84b9f5ab9f384809f8270216d0f36becd4a5f03956424ed84548590fce8720a3fe8c3e8356fccc3ca2908847fd95c6a0109a64af81324dbf012413abea8e22b3e98d358665e505d6ce4b7fbfde73ba39f5643710e33"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 01:23:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "f8e18fa7eb45fd12d0600e3a2e422207428064d985ea01b65a462af7d7bcaea81ccc25a0f3eebcbd9d7ea3dd90ada77edbe4e00e4ec226ccfa38c37b4c3bfadcd387b0c0b38bb85b6ef9a6eef2a99d7465889d318f68c953f9e13417969b94652fa957344c7b92880e856ec538c5f9437fdbf3632590f2cd36deff8a9a4f5f3ace61e905213ffd73833b515f16ed7976e9a53c05a0d85a62ee9925c164f280120e2f196ab16ba49ec7a97826ae13df6d3e955201f4d382818832e179c6e6ec1d58b000a1ea9f58408634869002421a8d0dcd8456c4a170a693f12df95e7aae0d3aabaaecca25c951620a6e1a89b52321f30af52132cf5e3bcdb412a89e432cdb805a73f0332df7de0651949de75304d686aa1544b68af558af05cf4015c50fd132c3ccc35da35fcbb023b4f7f7142493622a7e97229a0b488a415631825825f497b502bcfcb5d9790ad3805a05509b33d66b199bc679ce978e0650d5ebff390281c041f54a3514e84a62690ecf228ff11e2f8b9127b23f2055ce6af31d23c2884d9e5ea195f1e047a7ee7e8090fc87f6d4ba7eb566b213b5655ee0572bfd991ffcb95bd291a329f69888a4ae1c69c318c8e719a35fb08e2837516f6610f1611fc933a32d7a220c3554202f1431142a7ae890c33046425c06f2e399e130b166f3cff84a22395134e5fe393aa3b90af96e017d392bbb6b4ecb2105ea994685b41f15a18f37c4f837b7ac89c2d55a15d916405d3225dffd826ac365fe361f8b75e6d26ce0cd16dea8a5188c414777a105c6cbb4d0dd14f13cf60e50a7166203e53f6564070ada6113341ab253852edcb1a094f895e00616395de3bc1a5f3819399415661205e1c38c9ef79c407f180e067b82e69ac7df4beb6f2f745a41ca7ecbabbe43cf7e80e46fdc9ef9acfaa0c5a19d6c2eadac64bcbdda806a6acabc8ad85a7e857a31401e0e82ae0b4dd300c972fea799eaeb3b5bf623d7cc9f3b49b1cff2c2201c661ff2399caea616a72c0a34e0fbbc97c8bd6def431453aac964914ef9dcd295e46f44b6df414343b0cfa92850990cfdeafb94b4237f23fb9e96391c089e1be8eb965f0a15749a2c99ad26f2f2b468a3830b4679c0e98e0389bb473332c641fe1dc4373e089e49f601783a1883b356c2a46e87853b974585a0c126ae3f7275a19b02de429f007c6b30cb8524d9495b863ada399ce0e92d5af1c85ab832fb07e9c90dfdf540af775a01b23df0c03f2baac88fd61c3ba3c7dd564428df393f4faaf76a3f169b92e46c5155ee112dd63cdbf1188c2dfa1ef42a2e53c5b938536eeaa9613d35c8ad00c56f1b58beafc5982140ab0eb59c88ffe139d23acbf3bfe98f34215043408641da6f5ed9a3ed214db244185e128f6a189a33caee92827e595d2cba9eb4963292d43bc5eb8723b35a87fb9783f91b3e229a6fae68c92409f4de8f8e258a4cab23d117085a52e4f0b8be479c25884266e4013c8a0e45bc2658951ea6187ccee019a2349ee6c21bc28a714460213e30ec382b27b2df2de77bfe79fcf6a26c8374d1e93eaabb94b0bdaca15d0750aa64a5eb16b2b680a53a7bd9924a3212f0496aac02b506a271f88f2e2dc8c69068b8a6adae798c2823c22c1ff8c1a7377c34c8e50e55f749efabee102cbfe8a63524ec3aface543b2e7692de47b6532cc147ac7279580b05664d31e84ef1c09b9b1885c85ffe8855ecd315d89d020338adad39c97ef947d9b64eda59b06e7f0dbf72b5e082a5ed29856131f1cc3228883bb08917133af96c8cffb02c05c1e9777834019c5d91c59e4506a82d8cc719a505a8278cf59b38206771bef3e01aea854962194b5f1bc9d74c15050d1ede39d6c137e87d8b2d47bfee4078bd20538c955b91228be206c5eddf9eed586ee188160180732fe9fad1da2fc6f379e97590aac6eca66f708078c6c433cba59838bd11661efed185c4d8a9725aa21e5d9d90acd2dad76e35befc39d437398e4cf200059807029cae26b4a5acd719efc466482d7213794e86d07ba68962208fab2f9d2b4636a1586bc654791478d2181821efef0daa74076342b3c43762541bb25cefb6dc4a90dfc9123b78152cfec0a12cd91f735174161fc3222712f59d84511aae95a952562132d894fe575b9e0de3e5bf55835aa5b4466600b2a5df6d9bd667ff1f3f2635c60b79e9834d0b9eca6e38d6cf428da708c5c7d50414275a4d28016a2ec6cfa4f3babef56cc56e63b752373c4b652c5082b0561cd9416d9ad6eadaf1402c8e23f7c6a8f24d1093f875530664823240a20d9e97639aff38bbd208779b1bf7710f788778dacbabb5eb8aed355d4553cd02000e0fd21e6599b2383d03b60d7ab3f379a2d3a5be5596c1abd3ac133e35843f2ec36105e18d28d593ebba09b5b0e7e5628d308b1056470ec2edb380478feb22b80a2146f9b38f5164624a34e038775677bc6ae425bdc69081e379ec576f82f83e59563b5f3b424cf782486455533b37826c170c11d20005ca4339c1e4ba958c51ef8613c275e93ae5c33611809c2fcc1f0d516b66ffd6c8bc8d96039a38c4ee95c494ced55663e43bcc7270847c7c5725020da08c52ee800abca80e29a07bb02699a7e77acef6602fea7ac078fcef4363bdaac2a8d8f19a9f98d3526a752e2a81888b473854b9c1853d6dac692a59cc97a8d7b7cb0bbd2c9becf3fde47e10bd6f93505026e0b0c20a68260b1f7c3c4a8e2d55cec15fde56d38cc999119e9d3ed68068c0845c43ef308c5bc215bea8b42929943c34a880a1bf087c65cfa1575756e205f7504322eca7fbaac4e7668ebda77ce3cab95456aeae02f3f606ba10e58c35b8a4b85cf755dc73e47e855f711fa7650dfce7365431105dcb75d769cd89bd52e7be9673f390b1f9e164081a5ceef71744ff273b48015207b3261e2a11363061c016a2c854f27a197c4ddfe5c8a4b8a8000de40155238568a591e3d6f19377e92434b381f073d1256a3db77cf79de2fe2da63fd66c034315a9cf43d3a2a389c9bd5c6888468d700797f39290abf536fa710f9444f2832fbd143deef7d261925f7edbcbf2650a559c5721c3b42204772d88bd159544681441a572714bccbffbe54a2f0f2ff9b541ad7e0ac6a0c294057e73b6d11855b84336f1def45561b653c08c2f3b6d6453aa37a3985d41b1cfdfcfbcd1a3052eaddadd58ef18b4698eccb64f013052068febb2b90171b9ae898860da77f94f1ea228888723b3099fa0e3086aef890f0ce71ccb678026be4e2f16eedef715dd82b57d647a29f4f43c14f9195e3db3b78cad649c3b935e968188f39b46e5d36959d6d5f305d4bc62dd07fe0fe35f48264d4ca6ceccfbe51f0d74ff8ef53506b387bbb70be74ef84d08488c6912f01c281052c67926296c739fc1b0db35245c3f50031a070b322b577f40b9cbc94766f8282e50a12e98ba6b4ef8649fff0a2eba7370c7fdab80c23e64499d1f15038b0cf574528f011e6e608f307ca5a7f20801c9994d14ffe880f4ca431d91c5ab0b8bd9daf6b0e25b084d21f85f2a78583af99a00409d3488166dfe20632f1fe3b154c8391600e8786c54fff8bc228510610ea9d91bb54bcb9f0ff8840af1215fd43d3e4f2f844b9ce25cbec8c978459f980ab1cbf0993137227d16a4111ce62e3b37ca2ab02729618f82b1e391dce4179209653bb05793424e6f7c0dbeac3fff42cabe354aba718b332e81856d0b0bcb969d575eaa7144a464b3a9cbc7e74d8ca9f94439b49870ef69543b0060d1693a2b642a62597a9f45547eaad02370f2d8edb131cb1c9655ea18f4fb38e9bad8ad49bb1cad97f633116fabfec5e188d3b38c1f2e4496323b62fdb9db4748cbc654d9f70f3989fc5f45f1100319f93a02107b4f8e3aa0e50892792be9013e8fa05aeffe0f09980aeed153dbafb357dd06444aa004ef9d97bef73c3971764eecec3479f6bcdd7bbb725ac43914fbdd065195405ac3ea879ac0116b62a4fe037da8f37729f68185216240f14313118955a7810dfc5d5b0394318e79d44df573ceed89346ae5a40709174115f8107e9ae0de146a989851ee695805fcfcf8056d9823394f616de7bed1dd2595d2ce648ed8fb95dba385742912f16a62b3e2bfb9a5df626a2bafc29e2ec164e3a6693519be0f1cf1b8128eff950dfedcd5069d6b6956c541468707bf226b114df6fbfa48cc1921d49708c27c64f219317d20fe54d7beda6614dae5507d8133af050168b15abbe27ce949d6b2b026ccb891d2b3f52f5f5f4fcb52a942ab1833e9f96ca3cc08d60653172c60abc6a3a83ca1d3145357e834ffbd11cbec48188136a1820f9663ef78406e6a0f6c7ddae1bb536990a185f95a9609f311ff8782410635a6c18fc928b37e5104ec32687c6b8d133c723b02ade27aa8fc9df9371c48fb78f5b02593b29fddfca3fba5f082849615f0cda020f13f221472b4073934f815f48103f78ff8f7768db09d6b0a6ebf82539b97dcd377939f8c6f760e5a4914e87958f4dc9fd41a9a345560eac79051e7958afa12fed6a12557f4c2e593d75b6d58e2c449aa689990007cd1c130ad9f40ce7b69055498b0bf2bf5b233c00857ccda48e7e6a16367d4ab4d8f7ec06cea88eb06623a1a94e747a64ca35052f57a4a6261f524e7074c1080976f3f97963027e532555da4b61fc26fc5c456ded812543b67b49c270a74542d02a7fd28aa153a12e9cada5cb7c96f50a8f30bcbc2cbf2bf6d63cba49574a9254394f60819fc6cf037e4502f2318b18d5a9df72139cf463dc794504246f8827e989935b82e59816dee439c12c82b959ad91eb7174a46bdaa11ced3f1b5319ae6fffa4ec84b9f5ab9f384809f8270216d0f36becd4a5f03956424ed84548590fce8720a3fe8c3e8356fccc3ca2908847fd95c6a0109a64af81324dbf012413abea8e22b3e98d358665e505d6ce4b7fbfde73ba39f5643710e33"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:20 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:23:20 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c208000000000000000067681bfd070000000000000000fb6c7a2ce29a"}, 0x47) 01:23:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) [ 786.005456] SELinux: failed to load policy 01:23:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:21 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:23:21 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c208000000000000000067681bfd070000000000000000fb6c7a2ce29a"}, 0x47) 01:23:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {}, {}], {0x10, 0x2}}, 0x3c, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file1\x00', 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'filter\x00', 0xdb8, "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"}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x10) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @loopback, @local, 0x0, 0x6, 0x5, 0x0, 0x8, 0x10060}) ptrace$peek(0xfffffffeffffffff, 0x0, &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x185141) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffcbc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x49111, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 01:23:21 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c208000000000000000067681bfd070000000000000000fb6c7a2ce29a"}, 0x47) 01:23:21 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:23:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 01:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) 01:23:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0x10000000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0220200a8009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 786.756694] SELinux: failed to load policy 01:23:21 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c208000000000000000067681bfd070000000000000000fb6c7a2ce29a"}, 0x47) [ 786.808873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 01:23:22 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:23:22 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 786.975545] SELinux: failed to load policy 01:23:22 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x19, 0x0, 0x0) 01:23:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0x10000000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0220200a8009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 01:23:22 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x19, 0x0, 0x0) 01:23:22 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x19, 0x0, 0x0) 01:23:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='binfmt_misc\x00', 0x0, 0x0) [ 787.243389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 01:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) 01:23:22 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 01:23:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='binfmt_misc\x00', 0x0, 0x0) 01:23:22 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x19, 0x0, 0x0) 01:23:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0x10000000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0220200a8009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 01:23:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 787.650521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0000001f0000000400080008000600022bd000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:23:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0x10000000000000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0220200a8009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 787.699778] net_ratelimit: 22 callbacks suppressed [ 787.699785] protocol 88fb is buggy, dev hsr_slave_0 [ 787.709922] protocol 88fb is buggy, dev hsr_slave_1 [ 787.736241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:23:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='binfmt_misc\x00', 0x0, 0x0) 01:23:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) close(r0) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) [ 787.866436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:23 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x800, 0x5, 0x9, 0x1ff, 0x6, 0x401, 0x1, 0x34}}}, 0x60) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 787.939760] protocol 88fb is buggy, dev hsr_slave_0 [ 787.944859] protocol 88fb is buggy, dev hsr_slave_1 01:23:23 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setresuid(0x0, 0xffffffffffffffff, 0x0) 01:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) 01:23:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='binfmt_misc\x00', 0x0, 0x0) 01:23:23 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setresuid(0x0, 0xffffffffffffffff, 0x0) 01:23:23 executing program 4: migrate_pages(0x0, 0x9a8, &(0x7f0000000040), &(0x7f00000000c0)=0x9) 01:23:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0000001f0000000400080008000600022bd000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:23:23 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setresuid(0x0, 0xffffffffffffffff, 0x0) 01:23:23 executing program 4: migrate_pages(0x0, 0x9a8, &(0x7f0000000040), &(0x7f00000000c0)=0x9) [ 788.537045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:23:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) [ 788.579829] protocol 88fb is buggy, dev hsr_slave_0 [ 788.585009] protocol 88fb is buggy, dev hsr_slave_1 01:23:23 executing program 4: migrate_pages(0x0, 0x9a8, &(0x7f0000000040), &(0x7f00000000c0)=0x9) 01:23:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0000001f0000000400080008000600022bd000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 788.837750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 788.899740] protocol 88fb is buggy, dev hsr_slave_0 [ 788.904878] protocol 88fb is buggy, dev hsr_slave_1 [ 788.979754] protocol 88fb is buggy, dev hsr_slave_0 [ 788.979772] protocol 88fb is buggy, dev hsr_slave_0 01:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) 01:23:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:24 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setresuid(0x0, 0xffffffffffffffff, 0x0) 01:23:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:24 executing program 4: migrate_pages(0x0, 0x9a8, &(0x7f0000000040), &(0x7f00000000c0)=0x9) 01:23:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a0000001f0000000400080008000600022bd000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:23:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 789.414491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:23:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300), 0x0) 01:23:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 01:23:24 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000380)={0x9, @remote}, 0x12) 01:23:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x38, &(0x7f0000000000), 0x20a154cc) 01:23:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:25 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000380)={0x9, @remote}, 0x12) 01:23:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) sendmsg$rds(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:23:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)="441f082f71701dd0b7e88dfe36cef3e26def2300020000001100001300", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0xe7683999382ca226) 01:23:25 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000380)={0x9, @remote}, 0x12) [ 790.275096] input: syz1 as /devices/virtual/input/input39 01:23:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x100000000000021, &(0x7f0000000040)=0x6f1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000680)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x2e6}, 0x20002000) 01:23:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x38, &(0x7f0000000000), 0x20a154cc) [ 790.381785] input: syz1 as /devices/virtual/input/input40 01:23:25 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000380)={0x9, @remote}, 0x12) 01:23:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)="441f082f71701dd0b7e88dfe36cef3e26def2300020000001100001300", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0xe7683999382ca226) 01:23:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:25 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x2}, 0x20) 01:23:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x38, &(0x7f0000000000), 0x20a154cc) [ 790.613038] input: syz1 as /devices/virtual/input/input41 [ 790.665208] input: syz1 as /devices/virtual/input/input42 01:23:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)="441f082f71701dd0b7e88dfe36cef3e26def2300020000001100001300", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0xe7683999382ca226) 01:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) sendmsg$rds(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:23:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:26 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x2}, 0x20) 01:23:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x38, &(0x7f0000000000), 0x20a154cc) 01:23:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)="441f082f71701dd0b7e88dfe36cef3e26def2300020000001100001300", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0xe7683999382ca226) 01:23:26 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x2}, 0x20) [ 791.173303] input: syz1 as /devices/virtual/input/input44 [ 791.192483] input: syz1 as /devices/virtual/input/input43 01:23:26 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom$unix(r0, 0x0, 0x0, 0xc08e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfffffffffffffd1d, 0x0, 0x0, 0x0) 01:23:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000741f"]) 01:23:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 01:23:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 791.394736] input: syz1 as /devices/virtual/input/input45 01:23:26 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x2}, 0x20) [ 791.523966] input: syz1 as /devices/virtual/input/input46 01:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) sendmsg$rds(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:23:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000741f"]) 01:23:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 01:23:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fb"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:23:27 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom$unix(r0, 0x0, 0x0, 0xc08e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfffffffffffffd1d, 0x0, 0x0, 0x0) 01:23:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x48) 01:23:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 01:23:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000741f"]) 01:23:27 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:klogd_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1000}, 0x68) 01:23:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 01:23:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x48) 01:23:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000741f"]) [ 792.739806] net_ratelimit: 18 callbacks suppressed [ 792.739812] protocol 88fb is buggy, dev hsr_slave_0 [ 792.749953] protocol 88fb is buggy, dev hsr_slave_1 01:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) sendmsg$rds(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) 01:23:27 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom$unix(r0, 0x0, 0x0, 0xc08e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfffffffffffffd1d, 0x0, 0x0, 0x0) 01:23:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 01:23:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x48) 01:23:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000180)={{0x106, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529b9c0d16c05544383fd2a769bdee2c8dc77343ed2988db7f32a375f120666a0a8b64ada1c7539791e78875ee5713339c09a4b27047fe4ad1b8a89974f239b"}, 0x60) 01:23:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) 01:23:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x48) 01:23:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000180)={0x0, 0x5}, 0xc) 01:23:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) [ 793.059742] protocol 88fb is buggy, dev hsr_slave_0 [ 793.064864] protocol 88fb is buggy, dev hsr_slave_1 01:23:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom$unix(r0, 0x0, 0x0, 0xc08e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfffffffffffffd1d, 0x0, 0x0, 0x0) 01:23:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000180)={{0x106, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529b9c0d16c05544383fd2a769bdee2c8dc77343ed2988db7f32a375f120666a0a8b64ada1c7539791e78875ee5713339c09a4b27047fe4ad1b8a89974f239b"}, 0x60) 01:23:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) [ 793.139752] protocol 88fb is buggy, dev hsr_slave_0 [ 793.139758] protocol 88fb is buggy, dev hsr_slave_0 [ 793.139825] protocol 88fb is buggy, dev hsr_slave_1 [ 793.144939] protocol 88fb is buggy, dev hsr_slave_1 01:23:28 executing program 0: r0 = socket(0x10, 0x2, 0xc) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) 01:23:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000180)={{0x106, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529b9c0d16c05544383fd2a769bdee2c8dc77343ed2988db7f32a375f120666a0a8b64ada1c7539791e78875ee5713339c09a4b27047fe4ad1b8a89974f239b"}, 0x60) 01:23:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) 01:23:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) 01:23:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000180)={0x0, 0x5}, 0xc) 01:23:28 executing program 3: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffff7fffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 01:23:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000180)={{0x106, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529b9c0d16c05544383fd2a769bdee2c8dc77343ed2988db7f32a375f120666a0a8b64ada1c7539791e78875ee5713339c09a4b27047fe4ad1b8a89974f239b"}, 0x60) [ 793.885907] audit: type=1400 audit(1555464208.949:349): avc: denied { relabelfrom } for pid=8857 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=151287 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:23:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) 01:23:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x28) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x3}, 0x2c) [ 793.939754] protocol 88fb is buggy, dev hsr_slave_0 [ 793.944896] protocol 88fb is buggy, dev hsr_slave_1 01:23:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) [ 793.994492] audit: type=1400 audit(1555464208.949:350): avc: denied { relabelto } for pid=8857 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=151287 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:initctl_t:s0 tclass=netlink_netfilter_socket permissive=1 01:23:29 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000010b) 01:23:29 executing program 3: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffff7fffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 01:23:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x2c3, 0x0, 0x0}) 01:23:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0xa, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x9}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 01:23:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000180)={0x0, 0x5}, 0xc) 01:23:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) 01:23:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) [ 794.364682] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 01:23:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="240000001e0025eaa87865f51e8604000004000200bff20182a9000c080008000b000000", 0x24) 01:23:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0xa, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x9}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 01:23:29 executing program 3: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffff7fffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 01:23:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETFSMAP(r1, 0x4008af00, &(0x7f0000000280)) [ 794.653893] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 01:23:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000180)={0x0, 0x5}, 0xc) 01:23:30 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000010b) 01:23:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0xa, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x9}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 01:23:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="240000001e0025eaa87865f51e8604000004000200bff20182a9000c080008000b000000", 0x24) 01:23:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETFSMAP(r1, 0x4008af00, &(0x7f0000000280)) [ 795.113368] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 01:23:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0xa, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x9}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 01:23:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="240000001e0025eaa87865f51e8604000004000200bff20182a9000c080008000b000000", 0x24) 01:23:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xdf8f}) [ 795.215454] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 01:23:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000040)="1e", 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) fcntl$setstatus(r1, 0x4, 0x42803) 01:23:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETFSMAP(r1, 0x4008af00, &(0x7f0000000280)) 01:23:30 executing program 3: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffff7fffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 01:23:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="240000001e0025eaa87865f51e8604000004000200bff20182a9000c080008000b000000", 0x24) 01:23:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xdf8f}) 01:23:30 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000010b) 01:23:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETFSMAP(r1, 0x4008af00, &(0x7f0000000280)) 01:23:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) 01:23:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xdf8f}) 01:23:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xdf8f}) 01:23:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 01:23:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) 01:23:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) [ 796.062800] binder: 9683:9684 Acquire 1 refcount change on invalid ref 0 ret -22 [ 796.103842] binder_thread_write: 7 callbacks suppressed [ 796.103854] binder: 9683:9684 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 01:23:31 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) 01:23:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) 01:23:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 01:23:31 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000010b) 01:23:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) [ 796.432403] binder: 9799:9800 Acquire 1 refcount change on invalid ref 0 ret -22 01:23:31 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) 01:23:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) [ 796.588495] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 01:23:31 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) [ 796.702322] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 796.729494] CPU: 1 PID: 9681 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 796.736365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.745725] Call Trace: [ 796.748332] dump_stack+0x172/0x1f0 [ 796.752077] dump_header+0x15e/0x929 [ 796.755862] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.761022] ? ___ratelimit+0x60/0x595 [ 796.764980] ? do_raw_spin_unlock+0x57/0x270 [ 796.769412] oom_kill_process.cold+0x10/0x6f5 [ 796.773927] ? task_will_free_mem+0x139/0x6e0 [ 796.778449] ? find_held_lock+0x35/0x130 [ 796.782530] out_of_memory+0x936/0x12d0 [ 796.786520] ? lock_downgrade+0x810/0x810 [ 796.790771] ? oom_killer_disable+0x280/0x280 [ 796.795272] ? find_held_lock+0x35/0x130 [ 796.799413] mem_cgroup_out_of_memory+0x1d2/0x240 [ 796.804271] ? memcg_event_wake+0x230/0x230 [ 796.808609] ? do_raw_spin_unlock+0x57/0x270 [ 796.813028] ? _raw_spin_unlock+0x2d/0x50 [ 796.817242] try_charge+0x1028/0x15b0 [ 796.821064] ? find_held_lock+0x35/0x130 [ 796.825146] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 796.830004] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 796.834858] ? find_held_lock+0x35/0x130 [ 796.838929] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 796.844320] memcg_kmem_charge_memcg+0x7c/0x130 [ 796.849002] ? memcg_kmem_put_cache+0xb0/0xb0 [ 796.853517] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 796.858375] memcg_kmem_charge+0x136/0x300 [ 796.862617] __alloc_pages_nodemask+0x3c6/0x760 [ 796.867344] ? __alloc_pages_slowpath+0x2870/0x2870 [ 796.872461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.872480] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 796.883011] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 796.883078] alloc_pages_current+0x107/0x210 [ 796.883119] pte_alloc_one+0x1b/0x1a0 [ 796.896847] __pte_alloc+0x2a/0x360 [ 796.900491] __handle_mm_fault+0x3416/0x3f80 [ 796.904924] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 796.909780] ? find_held_lock+0x35/0x130 [ 796.909795] ? handle_mm_fault+0x322/0xb30 [ 796.909822] ? kasan_check_read+0x11/0x20 [ 796.909840] handle_mm_fault+0x43f/0xb30 [ 796.926366] __do_page_fault+0x62a/0xe90 [ 796.930450] ? vmalloc_fault+0x770/0x770 [ 796.934570] ? trace_hardirqs_off_caller+0x65/0x220 [ 796.939601] ? trace_hardirqs_on_caller+0x6a/0x220 [ 796.944544] ? page_fault+0x8/0x30 [ 796.948102] do_page_fault+0x71/0x581 [ 796.951917] ? page_fault+0x8/0x30 [ 796.955466] page_fault+0x1e/0x30 [ 796.958925] RIP: 0033:0x41063f [ 796.962134] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 796.981059] RSP: 002b:00007fff3eb59790 EFLAGS: 00010206 [ 796.986427] RAX: 00007f030c5c8000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 796.993679] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 797.000932] RBP: 00007fff3eb59870 R08: ffffffffffffffff R09: 0000000000000000 [ 797.008206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eb59950 [ 797.015458] R13: 00007f030c5e8700 R14: 0000000000000003 R15: 000000000073bfac [ 797.036129] Task in /syz3 killed as a result of limit of /syz3 [ 797.050135] memory: usage 95784kB, limit 0kB, failcnt 25 [ 797.055719] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.063411] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.069708] Memory cgroup stats for /syz3: cache:6816KB rss:65060KB rss_huge:61440KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:71820KB inactive_file:0KB active_file:12KB unevictable:0KB [ 797.093899] Memory cgroup out of memory: Kill process 27993 (syz-executor.3) score 9814000 or sacrifice child [ 797.106452] Killed process 27993 (syz-executor.3) total-vm:73244kB, anon-rss:4308kB, file-rss:34816kB, shmem-rss:0kB [ 797.120250] oom_reaper: reaped process 27993 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 797.142560] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 797.156671] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 797.166276] CPU: 1 PID: 9682 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 797.173119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.182454] Call Trace: [ 797.185041] dump_stack+0x172/0x1f0 [ 797.188673] dump_header+0x15e/0x929 [ 797.192379] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.197487] ? ___ratelimit+0x60/0x595 [ 797.201377] ? do_raw_spin_unlock+0x57/0x270 [ 797.205777] oom_kill_process.cold+0x10/0x6f5 [ 797.210261] ? task_will_free_mem+0x139/0x6e0 [ 797.214762] out_of_memory+0x936/0x12d0 [ 797.218724] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 797.223633] ? cgroup_file_notify+0x140/0x1b0 [ 797.228121] ? oom_killer_disable+0x280/0x280 [ 797.232601] ? cgroup_file_notify+0x140/0x1b0 [ 797.237090] mem_cgroup_out_of_memory+0x1d2/0x240 [ 797.241919] ? memcg_event_wake+0x230/0x230 [ 797.246247] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.251365] ? cgroup_file_notify+0x140/0x1b0 [ 797.255851] memory_max_write+0x169/0x300 [ 797.259988] ? mem_cgroup_write+0x360/0x360 [ 797.264298] ? lock_acquire+0x16f/0x3f0 [ 797.268307] ? kernfs_fop_write+0x227/0x480 [ 797.272622] cgroup_file_write+0x245/0x7a0 [ 797.276845] ? mem_cgroup_write+0x360/0x360 [ 797.281153] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 797.286072] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 797.290991] kernfs_fop_write+0x2ba/0x480 [ 797.295175] __vfs_write+0x116/0x820 [ 797.298888] ? kernfs_fop_open+0xd90/0xd90 [ 797.303109] ? kernel_read+0x120/0x120 [ 797.306991] ? __lock_is_held+0xb6/0x140 [ 797.311090] ? rcu_read_lock_sched_held+0x110/0x130 [ 797.316232] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 797.320990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 797.326519] ? __sb_start_write+0x1ac/0x360 [ 797.330834] vfs_write+0x20c/0x560 [ 797.334363] ksys_write+0xea/0x1f0 [ 797.337892] ? __ia32_sys_read+0xb0/0xb0 [ 797.341953] ? do_syscall_64+0x26/0x610 [ 797.345924] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.351274] ? do_syscall_64+0x26/0x610 [ 797.355236] __x64_sys_write+0x73/0xb0 [ 797.359109] do_syscall_64+0x103/0x610 [ 797.362992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.368170] RIP: 0033:0x458c29 [ 797.371350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.390239] RSP: 002b:00007f030c608c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.398023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 797.405277] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 797.412530] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 797.419782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f030c6096d4 [ 797.427036] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 797.438559] Task in /syz3 killed as a result of limit of /syz3 [ 797.450974] memory: usage 91384kB, limit 0kB, failcnt 31 [ 797.456533] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.465065] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.471769] Memory cgroup stats for /syz3: cache:6816KB rss:60808KB rss_huge:57344KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:67584KB inactive_file:4KB active_file:8KB unevictable:0KB [ 797.495755] Memory cgroup out of memory: Kill process 16366 (syz-executor.3) score 9558000 or sacrifice child [ 797.512632] Killed process 16366 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:35848kB, shmem-rss:0kB [ 797.530991] oom_reaper: reaped process 16366 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 797.553559] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 797.565520] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 797.574280] CPU: 0 PID: 9682 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 797.581120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.590472] Call Trace: [ 797.593048] dump_stack+0x172/0x1f0 [ 797.596673] dump_header+0x15e/0x929 [ 797.600393] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.605486] ? ___ratelimit+0x60/0x595 [ 797.609365] ? do_raw_spin_unlock+0x57/0x270 [ 797.613762] oom_kill_process.cold+0x10/0x6f5 [ 797.618247] ? task_will_free_mem+0x139/0x6e0 [ 797.622735] out_of_memory+0x936/0x12d0 [ 797.626741] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 797.631579] ? cgroup_file_notify+0x140/0x1b0 [ 797.636063] ? oom_killer_disable+0x280/0x280 [ 797.640544] ? cgroup_file_notify+0x140/0x1b0 [ 797.645033] mem_cgroup_out_of_memory+0x1d2/0x240 [ 797.649865] ? memcg_event_wake+0x230/0x230 [ 797.654180] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.659286] ? cgroup_file_notify+0x140/0x1b0 [ 797.663774] memory_max_write+0x169/0x300 [ 797.667913] ? mem_cgroup_write+0x360/0x360 [ 797.672223] ? lock_acquire+0x16f/0x3f0 [ 797.676620] ? kernfs_fop_write+0x227/0x480 [ 797.680968] cgroup_file_write+0x245/0x7a0 [ 797.685194] ? mem_cgroup_write+0x360/0x360 [ 797.689508] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 797.694434] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 797.699372] kernfs_fop_write+0x2ba/0x480 [ 797.703532] __vfs_write+0x116/0x820 [ 797.707244] ? kernfs_fop_open+0xd90/0xd90 [ 797.711466] ? kernel_read+0x120/0x120 [ 797.715346] ? __lock_is_held+0xb6/0x140 [ 797.719400] ? rcu_read_lock_sched_held+0x110/0x130 [ 797.724407] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 797.729152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 797.734675] ? __sb_start_write+0x1ac/0x360 [ 797.738999] vfs_write+0x20c/0x560 [ 797.742540] ksys_write+0xea/0x1f0 [ 797.746070] ? __ia32_sys_read+0xb0/0xb0 [ 797.750147] ? do_syscall_64+0x26/0x610 [ 797.754112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.759465] ? do_syscall_64+0x26/0x610 [ 797.763436] __x64_sys_write+0x73/0xb0 [ 797.767314] do_syscall_64+0x103/0x610 [ 797.771202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.776379] RIP: 0033:0x458c29 [ 797.779559] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.798447] RSP: 002b:00007f030c608c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.806144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 797.813408] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 797.820674] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 797.827933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f030c6096d4 [ 797.835194] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 797.844097] Task in /syz3 killed as a result of limit of /syz3 [ 797.851050] memory: usage 89024kB, limit 0kB, failcnt 61 [ 797.856548] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.863593] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.871334] Memory cgroup stats for /syz3: cache:6816KB rss:58616KB rss_huge:55296KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:65420KB inactive_file:4KB active_file:8KB unevictable:0KB [ 797.893555] Memory cgroup out of memory: Kill process 19592 (syz-executor.3) score 9553000 or sacrifice child [ 797.904158] Killed process 19592 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:35828kB, shmem-rss:0kB [ 797.918403] oom_reaper: reaped process 19592 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 797.923599] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 797.947896] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 797.953639] CPU: 1 PID: 9681 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 797.960473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.969810] Call Trace: [ 797.972388] dump_stack+0x172/0x1f0 [ 797.976020] dump_header+0x15e/0x929 [ 797.979726] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.984817] ? ___ratelimit+0x60/0x595 [ 797.988690] ? do_raw_spin_unlock+0x57/0x270 [ 797.993088] oom_kill_process.cold+0x10/0x6f5 [ 797.997572] ? task_will_free_mem+0x139/0x6e0 [ 798.002057] out_of_memory+0x936/0x12d0 [ 798.006041] ? oom_killer_disable+0x280/0x280 [ 798.010527] ? find_held_lock+0x35/0x130 [ 798.014582] mem_cgroup_out_of_memory+0x1d2/0x240 [ 798.019409] ? memcg_event_wake+0x230/0x230 [ 798.023719] ? do_raw_spin_unlock+0x57/0x270 [ 798.028116] ? _raw_spin_unlock+0x2d/0x50 [ 798.032251] try_charge+0x1028/0x15b0 [ 798.036036] ? find_held_lock+0x35/0x130 [ 798.040088] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 798.044916] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 798.049743] ? find_held_lock+0x35/0x130 [ 798.053790] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 798.058623] memcg_kmem_charge_memcg+0x7c/0x130 [ 798.063276] ? memcg_kmem_put_cache+0xb0/0xb0 [ 798.067759] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 798.072589] memcg_kmem_charge+0x136/0x300 [ 798.076813] __alloc_pages_nodemask+0x3c6/0x760 [ 798.081470] ? __alloc_pages_slowpath+0x2870/0x2870 [ 798.086476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.092001] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 798.097025] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 798.102554] alloc_pages_current+0x107/0x210 [ 798.106951] pte_alloc_one+0x1b/0x1a0 [ 798.110746] __pte_alloc+0x2a/0x360 [ 798.114358] __handle_mm_fault+0x3416/0x3f80 [ 798.118753] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 798.123591] ? find_held_lock+0x35/0x130 [ 798.127642] ? handle_mm_fault+0x322/0xb30 [ 798.131871] ? kasan_check_read+0x11/0x20 [ 798.136007] handle_mm_fault+0x43f/0xb30 [ 798.140059] __do_page_fault+0x62a/0xe90 [ 798.144126] ? vmalloc_fault+0x770/0x770 [ 798.148175] ? trace_hardirqs_off_caller+0x65/0x220 [ 798.153177] ? trace_hardirqs_on_caller+0x6a/0x220 [ 798.158095] ? page_fault+0x8/0x30 [ 798.161625] do_page_fault+0x71/0x581 [ 798.165409] ? page_fault+0x8/0x30 [ 798.168952] page_fault+0x1e/0x30 [ 798.172405] RIP: 0033:0x41063f [ 798.175595] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 798.194481] RSP: 002b:00007fff3eb59790 EFLAGS: 00010206 [ 798.199863] RAX: 00007f030c5c8000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 798.207117] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 798.214370] RBP: 00007fff3eb59870 R08: ffffffffffffffff R09: 0000000000000000 [ 798.221624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eb59950 [ 798.228876] R13: 00007f030c5e8700 R14: 0000000000000003 R15: 000000000073bfac [ 798.239826] net_ratelimit: 22 callbacks suppressed [ 798.239834] protocol 88fb is buggy, dev hsr_slave_0 [ 798.244890] Task in [ 798.249918] protocol 88fb is buggy, dev hsr_slave_1 [ 798.250802] /syz3 killed as a result of limit of /syz3 [ 798.263254] memory: usage 86660kB, limit 0kB, failcnt 61 [ 798.269453] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.276820] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.284438] Memory cgroup stats for /syz3: cache:6816KB rss:56484KB rss_huge:53248KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:63248KB inactive_file:4KB active_file:8KB unevictable:0KB [ 798.305820] Memory cgroup out of memory: Kill process 19544 (syz-executor.3) score 9552000 or sacrifice child [ 798.316065] Killed process 19544 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:35828kB, shmem-rss:0kB [ 798.335971] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 798.339743] protocol 88fb is buggy, dev hsr_slave_0 [ 798.352342] protocol 88fb is buggy, dev hsr_slave_1 [ 798.356044] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 798.363099] CPU: 0 PID: 9682 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 798.369950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.379315] Call Trace: [ 798.381914] dump_stack+0x172/0x1f0 [ 798.385557] dump_header+0x15e/0x929 [ 798.389296] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 798.394390] ? ___ratelimit+0x60/0x595 [ 798.398268] ? do_raw_spin_unlock+0x57/0x270 [ 798.402681] oom_kill_process.cold+0x10/0x6f5 [ 798.407211] ? task_will_free_mem+0x139/0x6e0 [ 798.411702] out_of_memory+0x936/0x12d0 [ 798.415668] ? oom_killer_disable+0x280/0x280 [ 798.420171] mem_cgroup_out_of_memory+0x1d2/0x240 [ 798.425046] ? memcg_event_wake+0x230/0x230 [ 798.429362] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 798.434467] ? cgroup_file_notify+0x140/0x1b0 [ 798.438988] memory_max_write+0x169/0x300 [ 798.443148] ? mem_cgroup_write+0x360/0x360 [ 798.447468] ? lock_acquire+0x16f/0x3f0 [ 798.451443] ? kernfs_fop_write+0x227/0x480 [ 798.455768] cgroup_file_write+0x245/0x7a0 [ 798.460013] ? mem_cgroup_write+0x360/0x360 [ 798.464335] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 798.469256] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 798.474176] kernfs_fop_write+0x2ba/0x480 [ 798.478362] __vfs_write+0x116/0x820 [ 798.482079] ? kernfs_fop_open+0xd90/0xd90 [ 798.486327] ? kernel_read+0x120/0x120 [ 798.490216] ? __lock_is_held+0xb6/0x140 [ 798.494374] ? rcu_read_lock_sched_held+0x110/0x130 [ 798.503644] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 798.508537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.514068] ? __sb_start_write+0x1ac/0x360 [ 798.518378] vfs_write+0x20c/0x560 [ 798.521919] ksys_write+0xea/0x1f0 [ 798.525466] ? __ia32_sys_read+0xb0/0xb0 [ 798.529518] ? do_syscall_64+0x26/0x610 [ 798.533480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.538831] ? do_syscall_64+0x26/0x610 [ 798.543264] __x64_sys_write+0x73/0xb0 [ 798.547158] do_syscall_64+0x103/0x610 [ 798.551049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.556239] RIP: 0033:0x458c29 [ 798.559424] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.578313] RSP: 002b:00007f030c608c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.586016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 798.593272] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 798.600533] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 798.607806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f030c6096d4 [ 798.615078] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 798.625059] Task in /syz3 killed as a result of limit of /syz3 [ 798.631757] memory: usage 84292kB, limit 0kB, failcnt 67 [ 798.637264] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.644326] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.651610] Memory cgroup stats for /syz3: cache:6816KB rss:54320KB rss_huge:51200KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:61076KB inactive_file:4KB active_file:8KB unevictable:0KB [ 798.674341] Memory cgroup out of memory: Kill process 19449 (syz-executor.3) score 9547000 or sacrifice child [ 798.685312] Killed process 19449 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:35792kB, shmem-rss:0kB [ 798.699629] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 798.712891] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 798.718300] CPU: 1 PID: 9681 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 798.725134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.734468] Call Trace: [ 798.737061] dump_stack+0x172/0x1f0 [ 798.740688] dump_header+0x15e/0x929 [ 798.744390] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 798.749480] ? ___ratelimit+0x60/0x595 [ 798.753358] ? do_raw_spin_unlock+0x57/0x270 [ 798.757759] oom_kill_process.cold+0x10/0x6f5 [ 798.762243] ? task_will_free_mem+0x139/0x6e0 [ 798.766728] out_of_memory+0x936/0x12d0 [ 798.770695] ? oom_killer_disable+0x280/0x280 [ 798.775175] ? find_held_lock+0x35/0x130 [ 798.779227] mem_cgroup_out_of_memory+0x1d2/0x240 [ 798.784056] ? memcg_event_wake+0x230/0x230 [ 798.788365] ? do_raw_spin_unlock+0x57/0x270 [ 798.792763] ? _raw_spin_unlock+0x2d/0x50 [ 798.796906] try_charge+0x1028/0x15b0 [ 798.800691] ? find_held_lock+0x35/0x130 [ 798.804743] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 798.809573] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 798.814402] ? find_held_lock+0x35/0x130 [ 798.818466] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 798.823301] memcg_kmem_charge_memcg+0x7c/0x130 [ 798.827964] ? memcg_kmem_put_cache+0xb0/0xb0 [ 798.832448] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 798.837294] memcg_kmem_charge+0x136/0x300 [ 798.841543] __alloc_pages_nodemask+0x3c6/0x760 [ 798.846199] ? __alloc_pages_slowpath+0x2870/0x2870 [ 798.851205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.856730] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 798.861732] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 798.867267] alloc_pages_current+0x107/0x210 [ 798.871708] pte_alloc_one+0x1b/0x1a0 [ 798.875499] __pte_alloc+0x2a/0x360 [ 798.879119] __handle_mm_fault+0x3416/0x3f80 [ 798.883541] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 798.888379] ? find_held_lock+0x35/0x130 [ 798.892435] ? handle_mm_fault+0x322/0xb30 [ 798.896678] ? kasan_check_read+0x11/0x20 [ 798.900811] handle_mm_fault+0x43f/0xb30 [ 798.904862] __do_page_fault+0x62a/0xe90 [ 798.908913] ? vmalloc_fault+0x770/0x770 [ 798.912969] ? trace_hardirqs_off_caller+0x65/0x220 [ 798.917976] ? trace_hardirqs_on_caller+0x6a/0x220 [ 798.922903] ? page_fault+0x8/0x30 [ 798.926441] do_page_fault+0x71/0x581 [ 798.930250] ? page_fault+0x8/0x30 [ 798.933778] page_fault+0x1e/0x30 [ 798.937214] RIP: 0033:0x41063f [ 798.940395] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 798.959298] RSP: 002b:00007fff3eb59790 EFLAGS: 00010206 [ 798.964648] RAX: 00007f030c5c8000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 798.971916] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 798.979170] RBP: 00007fff3eb59870 R08: ffffffffffffffff R09: 0000000000000000 [ 798.986437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3eb59950 [ 798.993691] R13: 00007f030c5e8700 R14: 0000000000000003 R15: 000000000073bfac [ 799.001224] Task in /syz3 killed as a result of limit of /syz3 [ 799.007273] memory: usage 81896kB, limit 0kB, failcnt 67 [ 799.012816] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.019601] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.025820] Memory cgroup stats for /syz3: cache:6816KB rss:52128KB rss_huge:49152KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:58880KB inactive_file:4KB active_file:8KB unevictable:0KB [ 799.047171] Memory cgroup out of memory: Kill process 31793 (syz-executor.3) score 9544000 or sacrifice child [ 799.057365] Killed process 31793 (syz-executor.3) total-vm:72452kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 799.071046] protocol 88fb is buggy, dev hsr_slave_0 [ 799.077065] protocol 88fb is buggy, dev hsr_slave_1 01:23:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x214) readv(r0, &(0x7f0000000580), 0x3c1) 01:23:34 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) 01:23:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 01:23:34 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) 01:23:34 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 799.222788] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 799.269531] binder: 9924:9925 Acquire 1 refcount change on invalid ref 0 ret -22 [ 799.281271] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 799.288954] binder: 9921:9926 Acquire 1 refcount change on invalid ref 0 ret -22 [ 799.306623] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 799.313482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.322839] Call Trace: [ 799.325435] dump_stack+0x172/0x1f0 [ 799.328415] binder: 9924:9925 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 799.329080] dump_header+0x15e/0x929 [ 799.339565] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 799.344680] ? ___ratelimit+0x60/0x595 [ 799.348575] ? do_raw_spin_unlock+0x57/0x270 [ 799.353004] oom_kill_process.cold+0x10/0x6f5 [ 799.357518] ? task_will_free_mem+0x139/0x6e0 [ 799.362030] ? find_held_lock+0x35/0x130 [ 799.366115] out_of_memory+0x936/0x12d0 [ 799.370099] ? lock_downgrade+0x810/0x810 [ 799.374261] ? oom_killer_disable+0x280/0x280 [ 799.378763] ? find_held_lock+0x35/0x130 [ 799.382846] mem_cgroup_out_of_memory+0x1d2/0x240 [ 799.387698] ? memcg_event_wake+0x230/0x230 [ 799.392032] ? do_raw_spin_unlock+0x57/0x270 [ 799.396453] ? _raw_spin_unlock+0x2d/0x50 [ 799.400618] try_charge+0x1028/0x15b0 [ 799.404430] ? find_held_lock+0x35/0x130 [ 799.408517] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 799.413366] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 799.418218] ? find_held_lock+0x35/0x130 [ 799.422288] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 799.427158] memcg_kmem_charge_memcg+0x7c/0x130 [ 799.431839] ? memcg_kmem_put_cache+0xb0/0xb0 [ 799.431860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 799.431879] memcg_kmem_charge+0x136/0x300 [ 799.431896] __alloc_pages_nodemask+0x3c6/0x760 [ 799.445447] ? __alloc_pages_slowpath+0x2870/0x2870 [ 799.445537] ? copy_process.part.0+0x373/0x7970 [ 799.445555] ? copy_process.part.0+0x1cb7/0x7970 [ 799.464621] copy_process.part.0+0x3e0/0x7970 [ 799.469136] ? mark_held_locks+0x100/0x100 [ 799.473380] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 799.478063] ? __might_fault+0x12b/0x1e0 [ 799.482148] ? __cleanup_sighand+0x70/0x70 [ 799.486393] ? lock_downgrade+0x810/0x810 [ 799.490562] _do_fork+0x257/0xfe0 [ 799.494029] ? fork_idle+0x1d0/0x1d0 [ 799.497761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.502532] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.507325] ? do_syscall_64+0x26/0x610 [ 799.507342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.507355] ? do_syscall_64+0x26/0x610 01:23:34 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) [ 799.507373] __x64_sys_clone+0xbf/0x150 [ 799.516701] do_syscall_64+0x103/0x610 [ 799.516721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.516732] RIP: 0033:0x4571fa [ 799.516747] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 799.516760] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 01:23:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 799.564131] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 799.571408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 799.578693] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 799.585973] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 799.585982] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 799.586295] protocol 88fb is buggy, dev hsr_slave_0 [ 799.593667] protocol 88fb is buggy, dev hsr_slave_0 [ 799.600714] protocol 88fb is buggy, dev hsr_slave_1 [ 799.605727] protocol 88fb is buggy, dev hsr_slave_1 01:23:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 01:23:34 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:34 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) [ 799.622406] Task in /syz3 killed as a result of limit of /syz3 [ 799.628428] memory: usage 77176kB, limit 0kB, failcnt 79 [ 799.678020] binder: 10032:10039 Acquire 1 refcount change on invalid ref 0 ret -22 [ 799.686234] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.705803] binder: 10038:10040 Acquire 1 refcount change on invalid ref 0 ret -22 [ 799.709972] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 01:23:34 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) [ 799.745461] binder: 10032:10039 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 799.758511] Memory cgroup stats for /syz3: cache:6816KB rss:47900KB rss_huge:45056KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54600KB inactive_file:0KB active_file:4KB unevictable:0KB [ 799.829408] binder: 10038:10040 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 799.834370] Memory cgroup out of memory: Kill process 4069 (syz-executor.3) score 9544000 or sacrifice child [ 799.871302] Killed process 4069 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35824kB, shmem-rss:0kB [ 800.050993] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 800.071079] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 800.089765] CPU: 0 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 800.096627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.105984] Call Trace: [ 800.108587] dump_stack+0x172/0x1f0 [ 800.112232] dump_header+0x15e/0x929 [ 800.115956] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 800.121088] ? ___ratelimit+0x60/0x595 [ 800.124991] ? do_raw_spin_unlock+0x57/0x270 [ 800.129426] oom_kill_process.cold+0x10/0x6f5 [ 800.133937] ? task_will_free_mem+0x139/0x6e0 [ 800.138447] ? find_held_lock+0x35/0x130 [ 800.142523] out_of_memory+0x936/0x12d0 [ 800.146513] ? lock_downgrade+0x810/0x810 [ 800.150692] ? oom_killer_disable+0x280/0x280 [ 800.155199] ? find_held_lock+0x35/0x130 [ 800.159285] mem_cgroup_out_of_memory+0x1d2/0x240 [ 800.164137] ? memcg_event_wake+0x230/0x230 [ 800.168485] ? do_raw_spin_unlock+0x57/0x270 [ 800.172909] ? _raw_spin_unlock+0x2d/0x50 [ 800.177075] try_charge+0x1028/0x15b0 [ 800.180887] ? find_held_lock+0x35/0x130 [ 800.184983] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 800.189839] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 800.194694] ? find_held_lock+0x35/0x130 [ 800.198771] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 800.203639] memcg_kmem_charge_memcg+0x7c/0x130 [ 800.208307] ? memcg_kmem_put_cache+0xb0/0xb0 [ 800.212794] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 800.217626] memcg_kmem_charge+0x136/0x300 [ 800.221851] __alloc_pages_nodemask+0x3c6/0x760 [ 800.226510] ? __alloc_pages_slowpath+0x2870/0x2870 [ 800.231522] ? copy_process.part.0+0x373/0x7970 [ 800.236179] ? copy_process.part.0+0x1cb7/0x7970 [ 800.240939] copy_process.part.0+0x3e0/0x7970 [ 800.245461] ? mark_held_locks+0x100/0x100 [ 800.249696] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 800.254366] ? __might_fault+0x12b/0x1e0 [ 800.258461] ? __cleanup_sighand+0x70/0x70 [ 800.262684] ? lock_downgrade+0x810/0x810 [ 800.266825] _do_fork+0x257/0xfe0 [ 800.270284] ? fork_idle+0x1d0/0x1d0 [ 800.274000] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 800.278745] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 800.283486] ? do_syscall_64+0x26/0x610 [ 800.287449] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.292797] ? do_syscall_64+0x26/0x610 [ 800.296768] __x64_sys_clone+0xbf/0x150 [ 800.300748] do_syscall_64+0x103/0x610 [ 800.304634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.309815] RIP: 0033:0x4571fa [ 800.313036] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 800.331940] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 800.339647] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 800.346915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 800.354168] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 800.361429] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 800.368709] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 800.378026] Task in /syz3 killed as a result of limit of /syz3 [ 800.385309] memory: usage 74844kB, limit 0kB, failcnt 85 [ 800.391022] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 800.397793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 800.404009] Memory cgroup stats for /syz3: cache:6816KB rss:45676KB rss_huge:43008KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52444KB inactive_file:0KB active_file:4KB unevictable:0KB [ 800.425704] Memory cgroup out of memory: Kill process 14316 (syz-executor.3) score 9542000 or sacrifice child [ 800.435902] Killed process 14316 (syz-executor.3) total-vm:72452kB, anon-rss:2208kB, file-rss:35828kB, shmem-rss:0kB [ 800.448041] oom_reaper: reaped process 14316 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 800.449446] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 800.469784] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 800.475183] CPU: 1 PID: 10035 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 800.482109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.491454] Call Trace: [ 800.494088] dump_stack+0x172/0x1f0 [ 800.502846] dump_header+0x15e/0x929 [ 800.506602] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 800.511812] ? ___ratelimit+0x60/0x595 [ 800.515696] ? do_raw_spin_unlock+0x57/0x270 [ 800.520097] oom_kill_process.cold+0x10/0x6f5 [ 800.524580] ? task_will_free_mem+0x139/0x6e0 [ 800.529063] out_of_memory+0x936/0x12d0 [ 800.533043] ? oom_killer_disable+0x280/0x280 [ 800.537529] ? find_held_lock+0x35/0x130 [ 800.541583] mem_cgroup_out_of_memory+0x1d2/0x240 [ 800.546411] ? memcg_event_wake+0x230/0x230 [ 800.550721] ? do_raw_spin_unlock+0x57/0x270 [ 800.555115] ? _raw_spin_unlock+0x2d/0x50 [ 800.559253] try_charge+0x1028/0x15b0 [ 800.563040] ? find_held_lock+0x35/0x130 [ 800.567092] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 800.571923] ? kasan_check_read+0x11/0x20 [ 800.576058] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 800.580889] mem_cgroup_try_charge+0x24d/0x5e0 [ 800.585460] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 800.590388] __handle_mm_fault+0x1e55/0x3f80 [ 800.594899] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 800.599743] ? find_held_lock+0x35/0x130 [ 800.603791] ? handle_mm_fault+0x322/0xb30 [ 800.608020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 800.613543] ? sync_mm_rss+0xa4/0x1c0 [ 800.617337] handle_mm_fault+0x43f/0xb30 [ 800.621402] __do_page_fault+0x62a/0xe90 [ 800.625454] ? vmalloc_fault+0x770/0x770 [ 800.629506] ? trace_hardirqs_off_caller+0x65/0x220 [ 800.634514] ? trace_hardirqs_on_caller+0x6a/0x220 [ 800.639430] ? page_fault+0x8/0x30 [ 800.642966] do_page_fault+0x71/0x581 [ 800.646755] ? page_fault+0x8/0x30 [ 800.650281] page_fault+0x1e/0x30 [ 800.653720] RIP: 0033:0x41063f [ 800.656898] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 800.675788] RSP: 002b:00007ffeeecd49b0 EFLAGS: 00010206 [ 800.681167] RAX: 00007f9d8e963000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 800.688421] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 800.695678] RBP: 00007ffeeecd4a90 R08: ffffffffffffffff R09: 0000000000000000 [ 800.702932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeeecd4b70 [ 800.710189] R13: 00007f9d8e983700 R14: 0000000000000003 R15: 000000000073bfac [ 800.717883] Task in /syz2 killed as a result of limit of /syz2 [ 800.724039] memory: usage 54304kB, limit 0kB, failcnt 9 [ 800.729430] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 800.736256] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 800.742599] Memory cgroup stats for /syz2: cache:168KB rss:45452KB rss_huge:43008KB shmem:80KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:45464KB inactive_file:4KB active_file:0KB unevictable:0KB [ 800.763483] Memory cgroup out of memory: Kill process 8334 (syz-executor.2) score 9547000 or sacrifice child [ 800.773587] Killed process 8334 (syz-executor.2) total-vm:72584kB, anon-rss:2204kB, file-rss:35856kB, shmem-rss:0kB [ 800.784680] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 800.785802] oom_reaper: reaped process 8334 (syz-executor.2), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 800.797876] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 800.811804] CPU: 1 PID: 10033 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 800.818734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.828100] Call Trace: [ 800.830684] dump_stack+0x172/0x1f0 [ 800.834315] dump_header+0x15e/0x929 [ 800.838042] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 800.843139] ? ___ratelimit+0x60/0x595 [ 800.847029] ? do_raw_spin_unlock+0x57/0x270 [ 800.851426] oom_kill_process.cold+0x10/0x6f5 [ 800.855909] ? task_will_free_mem+0x139/0x6e0 [ 800.860393] out_of_memory+0x936/0x12d0 [ 800.864366] ? oom_killer_disable+0x280/0x280 [ 800.868850] ? find_held_lock+0x35/0x130 [ 800.872902] mem_cgroup_out_of_memory+0x1d2/0x240 [ 800.877736] ? memcg_event_wake+0x230/0x230 [ 800.882049] ? do_raw_spin_unlock+0x57/0x270 [ 800.886447] ? _raw_spin_unlock+0x2d/0x50 [ 800.890599] try_charge+0x1028/0x15b0 [ 800.894395] ? find_held_lock+0x35/0x130 [ 800.898456] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 800.903300] ? kasan_check_read+0x11/0x20 [ 800.907452] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 800.912296] mem_cgroup_try_charge+0x24d/0x5e0 [ 800.916878] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 800.921885] __handle_mm_fault+0x1e55/0x3f80 [ 800.926288] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 800.931132] ? find_held_lock+0x35/0x130 [ 800.935203] ? handle_mm_fault+0x322/0xb30 [ 800.939433] ? kasan_check_read+0x11/0x20 [ 800.943587] handle_mm_fault+0x43f/0xb30 [ 800.947662] __do_page_fault+0x62a/0xe90 [ 800.951717] ? vmalloc_fault+0x770/0x770 [ 800.955764] ? trace_hardirqs_off_caller+0x65/0x220 [ 800.960781] ? trace_hardirqs_on_caller+0x6a/0x220 [ 800.965700] ? page_fault+0x8/0x30 [ 800.969229] do_page_fault+0x71/0x581 [ 800.973025] ? page_fault+0x8/0x30 [ 800.976563] page_fault+0x1e/0x30 [ 800.979998] RIP: 0033:0x41063f [ 800.983180] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 801.002066] RSP: 002b:00007ffdf53f8590 EFLAGS: 00010206 [ 801.007427] RAX: 00007fb5de6f7000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 801.014678] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 801.021933] RBP: 00007ffdf53f8670 R08: ffffffffffffffff R09: 0000000000000000 [ 801.029192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf53f8750 [ 801.036446] R13: 00007fb5de717700 R14: 0000000000000003 R15: 000000000073bfac [ 801.043877] Task in /syz5 killed as a result of limit of /syz5 [ 801.050016] memory: usage 83604kB, limit 0kB, failcnt 17 [ 801.055471] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.062353] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.068527] Memory cgroup stats for /syz5: cache:0KB rss:60764KB rss_huge:57344KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60688KB inactive_file:0KB active_file:8KB unevictable:0KB [ 801.089325] Memory cgroup out of memory: Kill process 15725 (syz-executor.5) score 9551000 or sacrifice child [ 801.099487] Killed process 15725 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:35864kB, shmem-rss:0kB [ 801.111704] oom_reaper: reaped process 15725 (syz-executor.5), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 801.114013] Memory cgroup out of memory: Kill process 8456 (syz-executor.2) score 9545000 or sacrifice child [ 801.135351] Killed process 8456 (syz-executor.2) total-vm:72452kB, anon-rss:2196kB, file-rss:35856kB, shmem-rss:0kB [ 801.149423] Memory cgroup out of memory: Kill process 31716 (syz-executor.3) score 9537000 or sacrifice child [ 801.150764] oom_reaper: reaped process 8456 (syz-executor.2), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 801.160082] Killed process 31716 (syz-executor.3) total-vm:72452kB, anon-rss:2208kB, file-rss:35808kB, shmem-rss:0kB [ 801.197848] Memory cgroup out of memory: Kill process 4339 (syz-executor.2) score 9540000 or sacrifice child [ 801.207968] Killed process 4339 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:35836kB, shmem-rss:0kB [ 801.230407] Memory cgroup out of memory: Kill process 19392 (syz-executor.5) score 9544000 or sacrifice child [ 801.242187] Killed process 19392 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 801.259555] Memory cgroup out of memory: Kill process 5239 (syz-executor.2) score 9537000 or sacrifice child [ 801.260252] oom_reaper: reaped process 19392 (syz-executor.5), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 801.272558] Killed process 5239 (syz-executor.2) total-vm:72848kB, anon-rss:2212kB, file-rss:35808kB, shmem-rss:0kB [ 801.311976] Memory cgroup out of memory: Kill process 5386 (syz-executor.2) score 9537000 or sacrifice child [ 801.323050] Killed process 5386 (syz-executor.2) total-vm:72848kB, anon-rss:2212kB, file-rss:35808kB, shmem-rss:0kB [ 801.354476] Memory cgroup out of memory: Kill process 4286 (syz-executor.3) score 9537000 or sacrifice child [ 801.364730] Killed process 4286 (syz-executor.3) total-vm:72452kB, anon-rss:2208kB, file-rss:35808kB, shmem-rss:0kB [ 801.392860] Memory cgroup out of memory: Kill process 4281 (syz-executor.2) score 9535000 or sacrifice child [ 801.404945] Killed process 4281 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35824kB, shmem-rss:0kB [ 801.423162] Memory cgroup out of memory: Kill process 14335 (syz-executor.5) score 9540000 or sacrifice child [ 801.436011] Killed process 14335 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:35820kB, shmem-rss:0kB [ 801.447547] oom_reaper: reaped process 14335 (syz-executor.5), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 801.466746] Memory cgroup out of memory: Kill process 10035 (syz-executor.2) score 9533000 or sacrifice child [ 801.484469] Killed process 10035 (syz-executor.2) total-vm:72584kB, anon-rss:2212kB, file-rss:35792kB, shmem-rss:0kB [ 801.497471] Memory cgroup out of memory: Kill process 4544 (syz-executor.3) score 9536000 or sacrifice child [ 801.498296] oom_reaper: reaped process 10035 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 801.510563] Killed process 4544 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:35784kB, shmem-rss:0kB [ 801.537523] Memory cgroup out of memory: Kill process 12672 (syz-executor.5) score 9537000 or sacrifice child [ 801.555971] Killed process 12674 (syz-executor.5) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 801.572630] Memory cgroup out of memory: Kill process 12672 (syz-executor.5) score 9537000 or sacrifice child [ 801.585545] Killed process 12672 (syz-executor.5) total-vm:72452kB, anon-rss:2192kB, file-rss:35828kB, shmem-rss:0kB [ 801.615921] oom_kill_process: 13 callbacks suppressed [ 801.615940] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 801.637050] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 801.642898] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 801.649745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.659097] Call Trace: [ 801.661692] dump_stack+0x172/0x1f0 [ 801.665331] dump_header+0x15e/0x929 [ 801.669052] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 801.674666] ? ___ratelimit+0x60/0x595 [ 801.678572] oom_kill_process.cold+0x10/0x6f5 [ 801.683079] ? task_will_free_mem+0x139/0x6e0 [ 801.687591] out_of_memory+0x936/0x12d0 [ 801.691581] ? oom_killer_disable+0x280/0x280 [ 801.696086] ? find_held_lock+0x35/0x130 [ 801.700164] mem_cgroup_out_of_memory+0x1d2/0x240 [ 801.705025] ? memcg_event_wake+0x230/0x230 [ 801.709362] ? do_raw_spin_unlock+0x57/0x270 [ 801.713778] ? _raw_spin_unlock+0x2d/0x50 [ 801.717935] try_charge+0x1028/0x15b0 [ 801.721747] ? find_held_lock+0x35/0x130 [ 801.725822] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 801.730674] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 801.735528] ? find_held_lock+0x35/0x130 [ 801.739600] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 801.744466] memcg_kmem_charge_memcg+0x7c/0x130 [ 801.749155] ? memcg_kmem_put_cache+0xb0/0xb0 [ 801.753667] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 801.758694] memcg_kmem_charge+0x136/0x300 [ 801.762939] __alloc_pages_nodemask+0x3c6/0x760 [ 801.767622] ? __alloc_pages_slowpath+0x2870/0x2870 [ 801.772656] ? copy_process.part.0+0x373/0x7970 [ 801.777329] ? copy_process.part.0+0x1cb7/0x7970 [ 801.782094] copy_process.part.0+0x3e0/0x7970 [ 801.786612] ? mark_held_locks+0x100/0x100 [ 801.790850] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 801.795535] ? __might_fault+0x12b/0x1e0 [ 801.799610] ? __cleanup_sighand+0x70/0x70 [ 801.803853] ? lock_downgrade+0x810/0x810 [ 801.808016] _do_fork+0x257/0xfe0 [ 801.811478] ? fork_idle+0x1d0/0x1d0 [ 801.815212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 801.819983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 801.824747] ? do_syscall_64+0x26/0x610 [ 801.828726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.834092] ? do_syscall_64+0x26/0x610 [ 801.838076] __x64_sys_clone+0xbf/0x150 [ 801.842058] do_syscall_64+0x103/0x610 [ 801.845969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.851162] RIP: 0033:0x4571fa [ 801.854364] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 801.873262] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 801.880976] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 801.888228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 801.895492] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 801.902753] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 801.910020] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 801.926868] Task in /syz3 killed as a result of limit of /syz3 [ 801.933513] memory: usage 65496kB, limit 0kB, failcnt 110 [ 801.939062] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.946977] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 801.953450] Memory cgroup stats for /syz3: cache:6816KB rss:37028KB rss_huge:34816KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43808KB inactive_file:0KB active_file:0KB unevictable:0KB [ 801.974831] Memory cgroup out of memory: Kill process 4976 (syz-executor.3) score 9535000 or sacrifice child [ 801.986109] Killed process 4976 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB [ 801.998492] oom_reaper: reaped process 4976 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 802.004314] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 802.027173] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 802.032653] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 802.039491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.048849] Call Trace: [ 802.051425] dump_stack+0x172/0x1f0 [ 802.055046] dump_header+0x15e/0x929 [ 802.058749] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 802.063839] ? ___ratelimit+0x60/0x595 [ 802.067712] ? do_raw_spin_unlock+0x57/0x270 [ 802.072108] oom_kill_process.cold+0x10/0x6f5 [ 802.076592] ? task_will_free_mem+0x139/0x6e0 [ 802.081074] ? find_held_lock+0x35/0x130 [ 802.085139] out_of_memory+0x936/0x12d0 [ 802.089108] ? lock_downgrade+0x810/0x810 [ 802.093245] ? oom_killer_disable+0x280/0x280 [ 802.097724] ? find_held_lock+0x35/0x130 [ 802.101789] mem_cgroup_out_of_memory+0x1d2/0x240 [ 802.106627] ? memcg_event_wake+0x230/0x230 [ 802.110935] ? do_raw_spin_unlock+0x57/0x270 [ 802.115338] ? _raw_spin_unlock+0x2d/0x50 [ 802.119473] try_charge+0x1028/0x15b0 [ 802.123273] ? find_held_lock+0x35/0x130 [ 802.127352] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 802.132195] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 802.137040] ? find_held_lock+0x35/0x130 [ 802.141089] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 802.145926] memcg_kmem_charge_memcg+0x7c/0x130 [ 802.150582] ? memcg_kmem_put_cache+0xb0/0xb0 [ 802.155065] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 802.159900] memcg_kmem_charge+0x136/0x300 [ 802.164129] __alloc_pages_nodemask+0x3c6/0x760 [ 802.168784] ? __alloc_pages_slowpath+0x2870/0x2870 [ 802.173801] ? copy_process.part.0+0x373/0x7970 [ 802.178463] ? copy_process.part.0+0x1cb7/0x7970 [ 802.183234] copy_process.part.0+0x3e0/0x7970 [ 802.187735] ? mark_held_locks+0x100/0x100 [ 802.191956] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 802.196624] ? __might_fault+0x12b/0x1e0 [ 802.200686] ? __cleanup_sighand+0x70/0x70 [ 802.204916] ? lock_downgrade+0x810/0x810 [ 802.209070] _do_fork+0x257/0xfe0 [ 802.212516] ? fork_idle+0x1d0/0x1d0 [ 802.216235] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.220991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.225748] ? do_syscall_64+0x26/0x610 [ 802.229708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.235085] ? do_syscall_64+0x26/0x610 [ 802.239066] __x64_sys_clone+0xbf/0x150 [ 802.243049] do_syscall_64+0x103/0x610 [ 802.246925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.252101] RIP: 0033:0x4571fa [ 802.255278] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 802.274163] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 802.281859] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 802.289114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 802.296366] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 802.303617] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 802.310869] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 802.321141] Task in /syz3 killed as a result of limit of /syz3 [ 802.327265] memory: usage 63172kB, limit 0kB, failcnt 116 [ 802.332946] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 802.339792] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 802.345983] Memory cgroup stats for /syz3: cache:6816KB rss:34876KB rss_huge:32768KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41652KB inactive_file:0KB active_file:0KB unevictable:0KB [ 802.367237] Memory cgroup out of memory: Kill process 4996 (syz-executor.3) score 9535000 or sacrifice child [ 802.377779] Killed process 4996 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB [ 802.389899] oom_reaper: reaped process 4996 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 802.396744] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 802.413333] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 802.418763] CPU: 0 PID: 10033 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 802.425683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.435029] Call Trace: [ 802.437621] dump_stack+0x172/0x1f0 [ 802.441260] dump_header+0x15e/0x929 [ 802.444969] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 802.450073] ? ___ratelimit+0x60/0x595 [ 802.453974] ? do_raw_spin_unlock+0x57/0x270 [ 802.458398] oom_kill_process.cold+0x10/0x6f5 [ 802.462990] ? task_will_free_mem+0x139/0x6e0 [ 802.467478] out_of_memory+0x936/0x12d0 [ 802.471457] ? oom_killer_disable+0x280/0x280 [ 802.475951] ? find_held_lock+0x35/0x130 [ 802.480029] mem_cgroup_out_of_memory+0x1d2/0x240 [ 802.484859] ? memcg_event_wake+0x230/0x230 [ 802.489169] ? do_raw_spin_unlock+0x57/0x270 [ 802.493575] ? _raw_spin_unlock+0x2d/0x50 [ 802.497725] try_charge+0x1028/0x15b0 [ 802.501516] ? find_held_lock+0x35/0x130 [ 802.509530] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 802.514385] ? kasan_check_read+0x11/0x20 [ 802.518533] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 802.523368] mem_cgroup_try_charge+0x24d/0x5e0 [ 802.527956] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 802.532905] __handle_mm_fault+0x1e55/0x3f80 [ 802.537328] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 802.542160] ? find_held_lock+0x35/0x130 [ 802.546208] ? handle_mm_fault+0x322/0xb30 [ 802.550456] ? kasan_check_read+0x11/0x20 [ 802.554614] handle_mm_fault+0x43f/0xb30 [ 802.558674] __do_page_fault+0x62a/0xe90 [ 802.562754] ? vmalloc_fault+0x770/0x770 [ 802.566806] ? trace_hardirqs_off_caller+0x65/0x220 [ 802.571822] ? trace_hardirqs_on_caller+0x6a/0x220 [ 802.576749] ? page_fault+0x8/0x30 [ 802.580293] do_page_fault+0x71/0x581 [ 802.584092] ? page_fault+0x8/0x30 [ 802.587616] page_fault+0x1e/0x30 [ 802.591077] RIP: 0033:0x41063f [ 802.594277] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 802.613181] RSP: 002b:00007ffdf53f8590 EFLAGS: 00010206 [ 802.618560] RAX: 00007fb5de6f7000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 802.625814] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 802.633082] RBP: 00007ffdf53f8670 R08: ffffffffffffffff R09: 0000000000000000 [ 802.640352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf53f8750 [ 802.647623] R13: 00007fb5de717700 R14: 0000000000000003 R15: 000000000073bfac [ 802.657505] Task in /syz5 killed as a result of limit of /syz5 [ 802.663612] memory: usage 74020kB, limit 0kB, failcnt 91 [ 802.669063] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 802.675933] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 802.682180] Memory cgroup stats for /syz5: cache:0KB rss:52092KB rss_huge:49152KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52016KB inactive_file:0KB active_file:0KB unevictable:0KB [ 802.703078] Memory cgroup out of memory: Kill process 12915 (syz-executor.5) score 9536000 or sacrifice child [ 802.713229] Killed process 12915 (syz-executor.5) total-vm:72452kB, anon-rss:2192kB, file-rss:35824kB, shmem-rss:0kB [ 802.725489] oom_reaper: reaped process 12915 (syz-executor.5), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 802.729374] syz-executor.2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 802.756295] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 802.762493] CPU: 1 PID: 1462 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 802.769336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.778673] Call Trace: [ 802.781249] dump_stack+0x172/0x1f0 [ 802.784866] dump_header+0x15e/0x929 [ 802.788568] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 802.793659] ? ___ratelimit+0x60/0x595 [ 802.797531] ? do_raw_spin_unlock+0x57/0x270 [ 802.801938] oom_kill_process.cold+0x10/0x6f5 [ 802.806440] ? task_will_free_mem+0x139/0x6e0 [ 802.810937] out_of_memory+0x936/0x12d0 [ 802.814932] ? oom_killer_disable+0x280/0x280 [ 802.819433] ? find_held_lock+0x35/0x130 [ 802.823509] mem_cgroup_out_of_memory+0x1d2/0x240 [ 802.828351] ? memcg_event_wake+0x230/0x230 [ 802.832680] ? do_raw_spin_unlock+0x57/0x270 [ 802.837095] ? _raw_spin_unlock+0x2d/0x50 [ 802.841252] try_charge+0x1028/0x15b0 [ 802.845067] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 802.849918] ? rcu_read_lock_sched_held+0x110/0x130 [ 802.854934] ? __alloc_pages_nodemask+0x63e/0x760 [ 802.859796] memcg_kmem_charge_memcg+0x7c/0x130 [ 802.864467] ? memcg_kmem_put_cache+0xb0/0xb0 [ 802.868969] ? cache_grow_begin+0x59a/0x8c0 [ 802.873295] ? lockdep_hardirqs_on+0x415/0x5d0 [ 802.877878] ? trace_hardirqs_on+0x67/0x230 [ 802.882202] cache_grow_begin+0x25f/0x8c0 [ 802.886358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 802.891896] ? __cpuset_node_allowed+0x136/0x540 [ 802.896658] fallback_alloc+0x1fd/0x2d0 [ 802.900641] ____cache_alloc_node+0x1be/0x1e0 [ 802.905163] kmem_cache_alloc+0x1f3/0x700 [ 802.909414] alloc_inode+0xb8/0x190 [ 802.913050] iget_locked+0x196/0x4a0 [ 802.916774] kernfs_get_inode+0x4e/0x580 [ 802.920842] kernfs_iop_lookup+0x1ab/0x230 [ 802.925093] __lookup_slow+0x27e/0x500 [ 802.928986] ? vfs_unlink+0x500/0x500 [ 802.932787] lookup_slow+0x58/0x80 [ 802.936311] path_mountpoint+0x5d2/0x1e60 [ 802.940462] ? mark_held_locks+0x100/0x100 [ 802.944684] ? path_openat+0x4690/0x4690 [ 802.948724] ? __lock_acquire+0x6eb/0x48f0 [ 802.952941] ? kmem_cache_alloc+0x568/0x700 [ 802.957258] filename_mountpoint+0x18e/0x390 [ 802.961653] ? user_path_at_empty+0x50/0x50 [ 802.965971] ? __phys_addr_symbol+0x30/0x70 [ 802.970278] ? __check_object_size+0x3d/0x42f [ 802.974817] ? strncpy_from_user+0x21f/0x2e0 [ 802.979217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 802.984736] ? getname_flags+0x277/0x5b0 [ 802.988780] user_path_mountpoint_at+0x3a/0x50 [ 802.993345] ksys_umount+0x164/0xe70 [ 802.997041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 803.002561] ? __do_page_fault+0x484/0xe90 [ 803.006781] ? __detach_mounts+0x320/0x320 [ 803.011001] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.015743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.020482] ? do_syscall_64+0x26/0x610 [ 803.024446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.029806] ? do_syscall_64+0x26/0x610 [ 803.033766] ? lockdep_hardirqs_on+0x415/0x5d0 [ 803.038330] __x64_sys_umount+0x54/0x80 [ 803.042291] do_syscall_64+0x103/0x610 [ 803.046165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.051338] RIP: 0033:0x45b677 [ 803.054540] Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.073423] RSP: 002b:00007ffeeecd3b48 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 803.081114] RAX: ffffffffffffffda RBX: 00000000000c344d RCX: 000000000045b677 [ 803.088366] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007ffeeecd3bf0 [ 803.095617] RBP: 00000000000006a9 R08: 0000000000000000 R09: 0000000000000010 [ 803.102871] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffeeecd4c80 [ 803.110123] R13: 00000000029a8940 R14: 0000000000000000 R15: 00007ffeeecd4c80 [ 803.120899] Task in /syz2 killed as a result of limit of /syz2 [ 803.126972] memory: usage 38008kB, limit 0kB, failcnt 56 [ 803.133043] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.140876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.147042] Memory cgroup stats for /syz2: cache:168KB rss:30376KB rss_huge:28672KB shmem:80KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30340KB inactive_file:8KB active_file:4KB unevictable:0KB [ 803.168198] Memory cgroup out of memory: Kill process 4710 (syz-executor.2) score 9531000 or sacrifice child [ 803.179338] Killed process 4710 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35808kB, shmem-rss:0kB [ 803.192552] oom_reaper: reaped process 4710 (syz-executor.2), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 803.196770] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 803.226076] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 803.231823] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 803.238662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.247997] Call Trace: [ 803.250577] dump_stack+0x172/0x1f0 [ 803.254194] dump_header+0x15e/0x929 [ 803.257891] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 803.262985] ? ___ratelimit+0x60/0x595 [ 803.266858] ? do_raw_spin_unlock+0x57/0x270 [ 803.271266] oom_kill_process.cold+0x10/0x6f5 [ 803.275751] ? task_will_free_mem+0x139/0x6e0 [ 803.280236] out_of_memory+0x936/0x12d0 [ 803.284200] ? oom_killer_disable+0x280/0x280 [ 803.288676] ? find_held_lock+0x35/0x130 [ 803.292728] mem_cgroup_out_of_memory+0x1d2/0x240 [ 803.297553] ? memcg_event_wake+0x230/0x230 [ 803.301863] ? do_raw_spin_unlock+0x57/0x270 [ 803.306257] ? _raw_spin_unlock+0x2d/0x50 [ 803.310392] try_charge+0x1028/0x15b0 [ 803.314178] ? find_held_lock+0x35/0x130 [ 803.318229] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 803.323054] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 803.327880] ? find_held_lock+0x35/0x130 [ 803.331927] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 803.336762] memcg_kmem_charge_memcg+0x7c/0x130 [ 803.341417] ? memcg_kmem_put_cache+0xb0/0xb0 [ 803.345898] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 803.350726] memcg_kmem_charge+0x136/0x300 [ 803.354946] __alloc_pages_nodemask+0x3c6/0x760 [ 803.359605] ? __alloc_pages_slowpath+0x2870/0x2870 [ 803.364611] ? copy_process.part.0+0x373/0x7970 [ 803.369261] ? copy_process.part.0+0x1cb7/0x7970 [ 803.374021] copy_process.part.0+0x3e0/0x7970 [ 803.378511] ? mark_held_locks+0x100/0x100 [ 803.382729] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 803.387384] ? __might_fault+0x12b/0x1e0 [ 803.391434] ? __cleanup_sighand+0x70/0x70 [ 803.395656] ? lock_downgrade+0x810/0x810 [ 803.399793] _do_fork+0x257/0xfe0 [ 803.403233] ? fork_idle+0x1d0/0x1d0 [ 803.406937] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.411683] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.416421] ? do_syscall_64+0x26/0x610 [ 803.420380] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.425725] ? do_syscall_64+0x26/0x610 [ 803.429690] __x64_sys_clone+0xbf/0x150 [ 803.433652] do_syscall_64+0x103/0x610 [ 803.437525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.442699] RIP: 0033:0x4571fa [ 803.445875] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 803.464759] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 803.472452] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 803.479703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 803.486973] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 803.494226] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 803.501475] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 803.515439] Task in /syz3 killed as a result of limit of /syz3 [ 803.521749] memory: usage 60844kB, limit 0kB, failcnt 122 [ 803.527311] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.534474] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.541074] Memory cgroup stats for /syz3: cache:6816KB rss:32744KB rss_huge:30720KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39492KB inactive_file:0KB active_file:0KB unevictable:0KB [ 803.562311] Memory cgroup out of memory: Kill process 5022 (syz-executor.3) score 9534000 or sacrifice child [ 803.573017] Killed process 5022 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB [ 803.585192] oom_reaper: reaped process 5022 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 803.587919] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 803.614293] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 803.620997] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 803.627831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.637166] Call Trace: [ 803.639740] dump_stack+0x172/0x1f0 [ 803.643354] dump_header+0x15e/0x929 [ 803.647054] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 803.652145] ? ___ratelimit+0x60/0x595 [ 803.656016] ? do_raw_spin_unlock+0x57/0x270 [ 803.660409] oom_kill_process.cold+0x10/0x6f5 [ 803.664888] ? task_will_free_mem+0x139/0x6e0 [ 803.669365] ? find_held_lock+0x35/0x130 [ 803.673411] out_of_memory+0x936/0x12d0 [ 803.677367] ? lock_downgrade+0x810/0x810 [ 803.681534] ? oom_killer_disable+0x280/0x280 [ 803.686018] ? find_held_lock+0x35/0x130 [ 803.690070] mem_cgroup_out_of_memory+0x1d2/0x240 [ 803.694895] ? memcg_event_wake+0x230/0x230 [ 803.699203] ? do_raw_spin_unlock+0x57/0x270 [ 803.703625] ? _raw_spin_unlock+0x2d/0x50 [ 803.707758] try_charge+0x1028/0x15b0 [ 803.711543] ? find_held_lock+0x35/0x130 [ 803.715590] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 803.720414] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 803.725239] ? find_held_lock+0x35/0x130 [ 803.729368] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 803.734198] memcg_kmem_charge_memcg+0x7c/0x130 [ 803.738850] ? memcg_kmem_put_cache+0xb0/0xb0 [ 803.743336] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 803.748163] memcg_kmem_charge+0x136/0x300 [ 803.752383] __alloc_pages_nodemask+0x3c6/0x760 [ 803.757036] ? __alloc_pages_slowpath+0x2870/0x2870 [ 803.762040] ? copy_process.part.0+0x373/0x7970 [ 803.766694] ? copy_process.part.0+0x1cb7/0x7970 [ 803.771535] copy_process.part.0+0x3e0/0x7970 [ 803.776020] ? mark_held_locks+0x100/0x100 [ 803.780240] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 803.784894] ? __might_fault+0x12b/0x1e0 [ 803.788939] ? __cleanup_sighand+0x70/0x70 [ 803.793166] ? lock_downgrade+0x810/0x810 [ 803.797302] _do_fork+0x257/0xfe0 [ 803.800739] ? fork_idle+0x1d0/0x1d0 [ 803.804442] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.809180] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.813916] ? do_syscall_64+0x26/0x610 [ 803.817871] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.823217] ? do_syscall_64+0x26/0x610 [ 803.827176] __x64_sys_clone+0xbf/0x150 [ 803.831136] do_syscall_64+0x103/0x610 [ 803.835014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.840197] RIP: 0033:0x4571fa [ 803.843379] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 803.862260] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 803.869972] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 803.877224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 803.884477] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 803.891730] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 803.898983] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 803.906573] net_ratelimit: 20 callbacks suppressed [ 803.906585] protocol 88fb is buggy, dev hsr_slave_0 [ 803.916644] protocol 88fb is buggy, dev hsr_slave_1 [ 803.921821] protocol 88fb is buggy, dev hsr_slave_0 [ 803.926873] protocol 88fb is buggy, dev hsr_slave_1 [ 803.932153] Task in /syz3 killed as a result of limit of /syz3 [ 803.938216] memory: usage 58476kB, limit 0kB, failcnt 128 [ 803.943935] protocol 88fb is buggy, dev hsr_slave_0 [ 803.944024] protocol 88fb is buggy, dev hsr_slave_1 [ 803.954320] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.961152] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.967310] Memory cgroup stats for /syz3: cache:6816KB rss:30568KB rss_huge:28672KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:37312KB inactive_file:0KB active_file:0KB unevictable:0KB [ 803.988536] Memory cgroup out of memory: Kill process 9289 (syz-executor.3) score 9523000 or sacrifice child [ 803.998570] Killed process 9289 (syz-executor.3) total-vm:72452kB, anon-rss:2152kB, file-rss:35804kB, shmem-rss:0kB [ 804.011649] oom_reaper: reaped process 9289 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 804.016886] syz-executor.2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 804.035641] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 804.041351] CPU: 1 PID: 1462 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 804.048191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.057527] Call Trace: [ 804.060101] dump_stack+0x172/0x1f0 [ 804.063758] dump_header+0x15e/0x929 [ 804.067458] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 804.072545] ? ___ratelimit+0x60/0x595 [ 804.076416] ? do_raw_spin_unlock+0x57/0x270 [ 804.080813] oom_kill_process.cold+0x10/0x6f5 [ 804.085293] ? task_will_free_mem+0x139/0x6e0 [ 804.089791] out_of_memory+0x936/0x12d0 [ 804.093778] ? oom_killer_disable+0x280/0x280 [ 804.098257] ? find_held_lock+0x35/0x130 [ 804.102309] mem_cgroup_out_of_memory+0x1d2/0x240 [ 804.107134] ? memcg_event_wake+0x230/0x230 [ 804.111443] ? do_raw_spin_unlock+0x57/0x270 [ 804.115851] ? _raw_spin_unlock+0x2d/0x50 [ 804.119993] try_charge+0x1028/0x15b0 [ 804.123783] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 804.128615] ? rcu_read_lock_sched_held+0x110/0x130 [ 804.133615] ? __alloc_pages_nodemask+0x63e/0x760 [ 804.138446] memcg_kmem_charge_memcg+0x7c/0x130 [ 804.143113] ? memcg_kmem_put_cache+0xb0/0xb0 [ 804.147593] ? cache_grow_begin+0x59a/0x8c0 [ 804.151902] ? lockdep_hardirqs_on+0x415/0x5d0 [ 804.156469] ? trace_hardirqs_on+0x67/0x230 [ 804.160781] cache_grow_begin+0x25f/0x8c0 [ 804.164919] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 804.170530] ? __cpuset_node_allowed+0x136/0x540 [ 804.175270] fallback_alloc+0x1fd/0x2d0 [ 804.179238] ____cache_alloc_node+0x1be/0x1e0 [ 804.183756] kmem_cache_alloc+0x1f3/0x700 [ 804.187893] alloc_inode+0xb8/0x190 [ 804.191509] iget_locked+0x196/0x4a0 [ 804.195209] kernfs_get_inode+0x4e/0x580 [ 804.199256] kernfs_iop_lookup+0x1ab/0x230 [ 804.203478] __lookup_slow+0x27e/0x500 [ 804.207346] ? vfs_unlink+0x500/0x500 [ 804.211143] lookup_slow+0x58/0x80 [ 804.214666] path_mountpoint+0x5d2/0x1e60 [ 804.218799] ? mark_held_locks+0x100/0x100 [ 804.223021] ? path_openat+0x4690/0x4690 [ 804.227326] ? __lock_acquire+0x6eb/0x48f0 [ 804.231543] ? kmem_cache_alloc+0x568/0x700 [ 804.235851] filename_mountpoint+0x18e/0x390 [ 804.240259] ? user_path_at_empty+0x50/0x50 [ 804.244571] ? __phys_addr_symbol+0x30/0x70 [ 804.248890] ? __check_object_size+0x3d/0x42f [ 804.253374] ? strncpy_from_user+0x21f/0x2e0 [ 804.257784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.263316] ? getname_flags+0x277/0x5b0 [ 804.267361] user_path_mountpoint_at+0x3a/0x50 [ 804.271927] ksys_umount+0x164/0xe70 [ 804.275624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.281160] ? __do_page_fault+0x484/0xe90 [ 804.285394] ? __detach_mounts+0x320/0x320 [ 804.289614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.294360] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.299099] ? do_syscall_64+0x26/0x610 [ 804.303058] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.308414] ? do_syscall_64+0x26/0x610 [ 804.312373] ? lockdep_hardirqs_on+0x415/0x5d0 [ 804.316969] __x64_sys_umount+0x54/0x80 [ 804.320931] do_syscall_64+0x103/0x610 [ 804.324807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.329984] RIP: 0033:0x45b677 [ 804.333165] Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.352050] RSP: 002b:00007ffeeecd3b48 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 804.359741] RAX: ffffffffffffffda RBX: 00000000000c344d RCX: 000000000045b677 [ 804.366992] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007ffeeecd3bf0 [ 804.374244] RBP: 00000000000006a9 R08: 0000000000000000 R09: 0000000000000010 [ 804.381516] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffeeecd4c80 [ 804.388772] R13: 00000000029a8940 R14: 0000000000000000 R15: 00007ffeeecd4c80 [ 804.396410] Task in /syz2 killed as a result of limit of /syz2 [ 804.402569] memory: usage 35692kB, limit 0kB, failcnt 62 [ 804.408017] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.414835] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.421038] Memory cgroup stats for /syz2: cache:168KB rss:28216KB rss_huge:26624KB shmem:80KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28184KB inactive_file:8KB active_file:4KB unevictable:0KB [ 804.441857] Memory cgroup out of memory: Kill process 20289 (syz-executor.2) score 9531000 or sacrifice child [ 804.452045] Killed process 20289 (syz-executor.2) total-vm:72716kB, anon-rss:2212kB, file-rss:35784kB, shmem-rss:0kB [ 804.464446] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 804.465307] oom_reaper: reaped process 20289 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 804.479582] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 804.493214] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 804.500066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.509413] Call Trace: [ 804.511994] dump_stack+0x172/0x1f0 [ 804.515616] dump_header+0x15e/0x929 [ 804.519317] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 804.524455] ? ___ratelimit+0x60/0x595 [ 804.528327] ? do_raw_spin_unlock+0x57/0x270 [ 804.532722] oom_kill_process.cold+0x10/0x6f5 [ 804.537204] ? task_will_free_mem+0x139/0x6e0 [ 804.541685] out_of_memory+0x936/0x12d0 [ 804.545649] ? oom_killer_disable+0x280/0x280 [ 804.550125] ? find_held_lock+0x35/0x130 [ 804.554175] mem_cgroup_out_of_memory+0x1d2/0x240 [ 804.558997] ? memcg_event_wake+0x230/0x230 [ 804.563306] ? do_raw_spin_unlock+0x57/0x270 [ 804.567713] ? _raw_spin_unlock+0x2d/0x50 [ 804.571848] try_charge+0x1028/0x15b0 [ 804.575630] ? find_held_lock+0x35/0x130 [ 804.579687] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 804.584519] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 804.589344] ? find_held_lock+0x35/0x130 [ 804.593389] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 804.598219] memcg_kmem_charge_memcg+0x7c/0x130 [ 804.602876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 804.607359] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 804.612186] memcg_kmem_charge+0x136/0x300 [ 804.616422] __alloc_pages_nodemask+0x3c6/0x760 [ 804.621078] ? __alloc_pages_slowpath+0x2870/0x2870 [ 804.626083] ? copy_process.part.0+0x373/0x7970 [ 804.630735] ? copy_process.part.0+0x1cb7/0x7970 [ 804.635475] copy_process.part.0+0x3e0/0x7970 [ 804.639957] ? mark_held_locks+0x100/0x100 [ 804.644184] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 804.648836] ? __might_fault+0x12b/0x1e0 [ 804.652889] ? __cleanup_sighand+0x70/0x70 [ 804.657111] ? lock_downgrade+0x810/0x810 [ 804.661262] _do_fork+0x257/0xfe0 [ 804.664717] ? fork_idle+0x1d0/0x1d0 [ 804.668418] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.673155] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.677890] ? do_syscall_64+0x26/0x610 [ 804.681846] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.687190] ? do_syscall_64+0x26/0x610 [ 804.691148] __x64_sys_clone+0xbf/0x150 [ 804.695107] do_syscall_64+0x103/0x610 [ 804.698981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.704151] RIP: 0033:0x4571fa [ 804.707329] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 804.726225] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 804.733918] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 804.741169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 804.748419] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 804.755669] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 804.762919] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 804.770567] protocol 88fb is buggy, dev hsr_slave_0 [ 804.775657] protocol 88fb is buggy, dev hsr_slave_1 [ 804.779860] protocol 88fb is buggy, dev hsr_slave_0 [ 804.781004] Task in /syz3 killed as a result of limit of /syz3 [ 804.785793] protocol 88fb is buggy, dev hsr_slave_1 [ 804.791776] memory: usage 56164kB, limit 0kB, failcnt 134 [ 804.802348] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.809388] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.815706] Memory cgroup stats for /syz3: cache:6816KB rss:28408KB rss_huge:26624KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:35168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 804.837013] Memory cgroup out of memory: Kill process 9193 (syz-executor.3) score 9522000 or sacrifice child [ 804.847113] Killed process 9193 (syz-executor.3) total-vm:72416kB, anon-rss:2152kB, file-rss:35800kB, shmem-rss:0kB [ 804.858082] syz-executor.2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 804.860283] oom_reaper: reaped process 9193 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 804.873338] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 804.887731] CPU: 1 PID: 1462 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 804.894566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.903914] Call Trace: [ 804.906492] dump_stack+0x172/0x1f0 [ 804.910113] dump_header+0x15e/0x929 [ 804.913825] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 804.918915] ? ___ratelimit+0x60/0x595 [ 804.922788] ? do_raw_spin_unlock+0x57/0x270 [ 804.927182] oom_kill_process.cold+0x10/0x6f5 [ 804.931683] ? task_will_free_mem+0x139/0x6e0 [ 804.936169] out_of_memory+0x936/0x12d0 [ 804.940133] ? oom_killer_disable+0x280/0x280 [ 804.944628] ? find_held_lock+0x35/0x130 [ 804.948677] mem_cgroup_out_of_memory+0x1d2/0x240 [ 804.953509] ? memcg_event_wake+0x230/0x230 [ 804.957816] ? do_raw_spin_unlock+0x57/0x270 [ 804.962211] ? _raw_spin_unlock+0x2d/0x50 [ 804.966348] try_charge+0x1028/0x15b0 [ 804.970136] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 804.974977] ? rcu_read_lock_sched_held+0x110/0x130 [ 804.979982] ? __alloc_pages_nodemask+0x63e/0x760 [ 804.984813] memcg_kmem_charge_memcg+0x7c/0x130 [ 804.989468] ? memcg_kmem_put_cache+0xb0/0xb0 [ 804.993946] ? cache_grow_begin+0x59a/0x8c0 [ 804.998272] ? lockdep_hardirqs_on+0x415/0x5d0 [ 805.002846] ? trace_hardirqs_on+0x67/0x230 [ 805.007162] cache_grow_begin+0x25f/0x8c0 [ 805.011297] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 805.016820] ? __cpuset_node_allowed+0x136/0x540 [ 805.021558] fallback_alloc+0x1fd/0x2d0 [ 805.025523] ____cache_alloc_node+0x1be/0x1e0 [ 805.030003] kmem_cache_alloc+0x1f3/0x700 [ 805.034141] alloc_inode+0xb8/0x190 [ 805.037749] iget_locked+0x196/0x4a0 [ 805.041449] kernfs_get_inode+0x4e/0x580 [ 805.045496] kernfs_iop_lookup+0x1ab/0x230 [ 805.049727] __lookup_slow+0x27e/0x500 [ 805.053614] ? vfs_unlink+0x500/0x500 [ 805.057411] lookup_slow+0x58/0x80 [ 805.060935] path_mountpoint+0x5d2/0x1e60 [ 805.065076] ? mark_held_locks+0x100/0x100 [ 805.069293] ? path_openat+0x4690/0x4690 [ 805.073345] ? __lock_acquire+0x6eb/0x48f0 [ 805.077575] ? kmem_cache_alloc+0x568/0x700 [ 805.081884] filename_mountpoint+0x18e/0x390 [ 805.086291] ? user_path_at_empty+0x50/0x50 [ 805.090601] ? __phys_addr_symbol+0x30/0x70 [ 805.094905] ? __check_object_size+0x3d/0x42f [ 805.099386] ? strncpy_from_user+0x21f/0x2e0 [ 805.103782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 805.109300] ? getname_flags+0x277/0x5b0 [ 805.113358] user_path_mountpoint_at+0x3a/0x50 [ 805.117939] ksys_umount+0x164/0xe70 [ 805.121647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 805.127184] ? __do_page_fault+0x484/0xe90 [ 805.131405] ? __detach_mounts+0x320/0x320 [ 805.135624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.140377] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.145116] ? do_syscall_64+0x26/0x610 [ 805.149074] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.154419] ? do_syscall_64+0x26/0x610 [ 805.158380] ? lockdep_hardirqs_on+0x415/0x5d0 [ 805.162970] __x64_sys_umount+0x54/0x80 [ 805.166929] do_syscall_64+0x103/0x610 [ 805.170819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.175994] RIP: 0033:0x45b677 [ 805.179170] Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.198154] RSP: 002b:00007ffeeecd3b48 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 805.205860] RAX: ffffffffffffffda RBX: 00000000000c344d RCX: 000000000045b677 [ 805.213113] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007ffeeecd3bf0 [ 805.220363] RBP: 00000000000006a9 R08: 0000000000000000 R09: 0000000000000010 [ 805.227611] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffeeecd4c80 [ 805.234862] R13: 00000000029a8940 R14: 0000000000000000 R15: 00007ffeeecd4c80 [ 805.242375] Task in /syz2 killed as a result of limit of /syz2 [ 805.248429] memory: usage 33276kB, limit 0kB, failcnt 69 [ 805.253989] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.260792] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.266918] Memory cgroup stats for /syz2: cache:168KB rss:26068KB rss_huge:24576KB shmem:80KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26020KB inactive_file:4KB active_file:4KB unevictable:0KB [ 805.287734] Memory cgroup out of memory: Kill process 20784 (syz-executor.2) score 9530000 or sacrifice child [ 805.298361] Killed process 20784 (syz-executor.2) total-vm:72584kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 805.309442] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 805.311041] oom_reaper: reaped process 20784 (syz-executor.2), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 805.324082] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 805.338172] CPU: 1 PID: 7782 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 805.345009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.354357] Call Trace: [ 805.356933] dump_stack+0x172/0x1f0 [ 805.360552] dump_header+0x15e/0x929 [ 805.364254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 805.369339] ? ___ratelimit+0x60/0x595 [ 805.373227] ? do_raw_spin_unlock+0x57/0x270 [ 805.377634] oom_kill_process.cold+0x10/0x6f5 [ 805.382117] ? task_will_free_mem+0x139/0x6e0 [ 805.386598] out_of_memory+0x936/0x12d0 [ 805.390557] ? oom_killer_disable+0x280/0x280 [ 805.395038] ? find_held_lock+0x35/0x130 [ 805.399087] mem_cgroup_out_of_memory+0x1d2/0x240 [ 805.403912] ? memcg_event_wake+0x230/0x230 [ 805.408234] ? do_raw_spin_unlock+0x57/0x270 [ 805.412630] ? _raw_spin_unlock+0x2d/0x50 [ 805.416764] try_charge+0x1028/0x15b0 [ 805.420547] ? find_held_lock+0x35/0x130 [ 805.424608] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 805.429443] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 805.434270] ? find_held_lock+0x35/0x130 [ 805.438314] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 805.443145] memcg_kmem_charge_memcg+0x7c/0x130 [ 805.447797] ? memcg_kmem_put_cache+0xb0/0xb0 [ 805.452280] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 805.457652] memcg_kmem_charge+0x136/0x300 [ 805.461871] __alloc_pages_nodemask+0x3c6/0x760 [ 805.466531] ? __alloc_pages_slowpath+0x2870/0x2870 [ 805.471536] ? copy_process.part.0+0x373/0x7970 [ 805.476189] ? copy_process.part.0+0x1cb7/0x7970 [ 805.480930] copy_process.part.0+0x3e0/0x7970 [ 805.485411] ? mark_held_locks+0x100/0x100 [ 805.489628] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 805.494382] ? __might_fault+0x12b/0x1e0 [ 805.503178] ? __cleanup_sighand+0x70/0x70 [ 805.512178] ? lock_downgrade+0x810/0x810 [ 805.516341] _do_fork+0x257/0xfe0 [ 805.519784] ? fork_idle+0x1d0/0x1d0 [ 805.523488] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.528229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.532975] ? do_syscall_64+0x26/0x610 [ 805.536934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.542280] ? do_syscall_64+0x26/0x610 [ 805.546240] __x64_sys_clone+0xbf/0x150 [ 805.550206] do_syscall_64+0x103/0x610 [ 805.554549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.559808] RIP: 0033:0x4571fa [ 805.562992] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 805.581877] RSP: 002b:00007fff3eb599d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 805.589567] RAX: ffffffffffffffda RBX: 00007fff3eb599d0 RCX: 00000000004571fa [ 805.596831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 805.604082] RBP: 00007fff3eb59a10 R08: 0000000000000001 R09: 0000000002076940 [ 805.611331] R10: 0000000002076c10 R11: 0000000000000246 R12: 0000000000000001 [ 805.618584] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff3eb59a60 [ 805.627335] Task in /syz3 killed as a result of limit of /syz3 [ 805.633449] memory: usage 53736kB, limit 0kB, failcnt 140 [ 805.639021] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.645845] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.652075] Memory cgroup stats for /syz3: cache:6816KB rss:26244KB rss_huge:24576KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:33000KB inactive_file:0KB active_file:0KB unevictable:0KB [ 805.673400] Memory cgroup out of memory: Kill process 27979 (syz-executor.3) score 9294000 or sacrifice child [ 805.683565] Killed process 27979 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB [ 805.694609] Memory cgroup out of memory: Kill process 21059 (syz-executor.2) score 9530000 or sacrifice child [ 805.695536] oom_reaper: reaped process 27979 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 805.706481] Killed process 21059 (syz-executor.2) total-vm:72584kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 805.737806] Memory cgroup out of memory: Kill process 28117 (syz-executor.3) score 9294000 or sacrifice child [ 805.749374] Killed process 28117 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB [ 805.761614] oom_reaper: reaped process 28117 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 805.772140] Memory cgroup out of memory: Kill process 21448 (syz-executor.2) score 9530000 or sacrifice child [ 805.784540] Killed process 21448 (syz-executor.2) total-vm:72584kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 805.795843] Memory cgroup out of memory: Kill process 28574 (syz-executor.3) score 9294000 or sacrifice child [ 805.808046] Killed process 28574 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB [ 805.819422] Memory cgroup out of memory: Kill process 2710 (syz-executor.2) score 9529000 or sacrifice child [ 805.820334] oom_reaper: reaped process 28574 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 805.831941] Killed process 2710 (syz-executor.2) total-vm:72716kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB [ 805.852534] oom_reaper: reaped process 2710 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 805.863673] Memory cgroup out of memory: Kill process 29181 (syz-executor.3) score 9294000 or sacrifice child [ 805.874265] Killed process 29181 (syz-executor.3) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB [ 805.887796] Memory cgroup out of memory: Kill process 15236 (syz-executor.3) score 9292000 or sacrifice child [ 805.899066] Killed process 15236 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 805.910574] oom_reaper: reaped process 15236 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 805.912651] Memory cgroup out of memory: Kill process 3164 (syz-executor.2) score 9528000 or sacrifice child [ 805.938140] Killed process 3164 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB [ 805.950009] Memory cgroup out of memory: Kill process 15253 (syz-executor.3) score 9292000 or sacrifice child [ 805.956341] oom_reaper: reaped process 3164 (syz-executor.2), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 805.962181] Killed process 15253 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 805.989708] Memory cgroup out of memory: Kill process 3565 (syz-executor.2) score 9528000 or sacrifice child [ 806.005707] Killed process 3565 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB [ 806.017746] oom_reaper: reaped process 3565 (syz-executor.2), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 806.028419] Memory cgroup out of memory: Kill process 15270 (syz-executor.3) score 9292000 or sacrifice child [ 806.044454] Killed process 15270 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 806.058030] Memory cgroup out of memory: Kill process 3800 (syz-executor.2) score 9528000 or sacrifice child [ 806.068262] Killed process 3800 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB [ 806.080496] oom_reaper: reaped process 3800 (syz-executor.2), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 806.092885] Memory cgroup out of memory: Kill process 3606 (syz-executor.2) score 9291000 or sacrifice child [ 806.103012] Killed process 3606 (syz-executor.2) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB [ 806.126861] Memory cgroup out of memory: Kill process 15318 (syz-executor.3) score 9292000 or sacrifice child [ 806.137097] Killed process 15318 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 806.154829] Memory cgroup out of memory: Kill process 3590 (syz-executor.2) score 9287000 or sacrifice child [ 806.165093] Killed process 3590 (syz-executor.2) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 806.182692] Memory cgroup out of memory: Kill process 15365 (syz-executor.3) score 9292000 or sacrifice child [ 806.194337] Killed process 15365 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 806.208758] Memory cgroup out of memory: Kill process 4249 (syz-executor.2) score 9287000 or sacrifice child [ 806.225556] Killed process 4249 (syz-executor.2) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 806.236563] Memory cgroup out of memory: Kill process 11436 (syz-executor.3) score 9288000 or sacrifice child [ 806.237334] oom_reaper: reaped process 4249 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 806.248644] Killed process 11436 (syz-executor.3) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 806.276185] Memory cgroup out of memory: Kill process 4296 (syz-executor.2) score 9287000 or sacrifice child [ 806.277306] oom_reaper: reaped process 11436 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 806.287941] Killed process 4296 (syz-executor.2) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 806.326789] Memory cgroup out of memory: Kill process 11467 (syz-executor.3) score 9288000 or sacrifice child [ 806.337027] Killed process 11467 (syz-executor.3) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 806.348938] oom_reaper: reaped process 11467 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 806.358905] Memory cgroup out of memory: Kill process 11498 (syz-executor.3) score 9288000 or sacrifice child [ 806.375234] Killed process 11498 (syz-executor.3) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 806.386906] oom_reaper: reaped process 11498 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 806.387958] Memory cgroup out of memory: Kill process 4569 (syz-executor.2) score 9287000 or sacrifice child [ 806.410067] Killed process 4569 (syz-executor.2) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 806.421234] oom_reaper: reaped process 4569 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 806.423179] Memory cgroup out of memory: Kill process 7782 (syz-executor.3) score 8988000 or sacrifice child [ 806.445929] Killed process 7782 (syz-executor.3) total-vm:72320kB, anon-rss:116kB, file-rss:35712kB, shmem-rss:0kB [ 806.457231] Memory cgroup out of memory: Kill process 1462 (syz-executor.2) score 8988000 or sacrifice child [ 806.457726] oom_reaper: reaped process 7782 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 806.473380] Killed process 1462 (syz-executor.2) total-vm:72320kB, anon-rss:120kB, file-rss:35712kB, shmem-rss:0kB 01:23:42 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 01:23:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:42 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:42 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) [ 806.957698] oom_kill_process: 24 callbacks suppressed [ 806.957714] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 806.983594] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 806.989020] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 806.995864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.005217] Call Trace: [ 807.007815] dump_stack+0x172/0x1f0 [ 807.011458] dump_header+0x15e/0x929 [ 807.015180] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 807.020298] ? ___ratelimit+0x60/0x595 [ 807.024199] oom_kill_process.cold+0x10/0x6f5 [ 807.028707] ? task_will_free_mem+0x139/0x6e0 [ 807.033209] ? find_held_lock+0x35/0x130 [ 807.037281] out_of_memory+0x936/0x12d0 [ 807.041264] ? lock_downgrade+0x810/0x810 [ 807.045424] ? oom_killer_disable+0x280/0x280 [ 807.049924] ? find_held_lock+0x35/0x130 [ 807.054021] mem_cgroup_out_of_memory+0x1d2/0x240 [ 807.058868] ? memcg_event_wake+0x230/0x230 [ 807.063200] ? do_raw_spin_unlock+0x57/0x270 [ 807.067634] ? _raw_spin_unlock+0x2d/0x50 [ 807.071791] try_charge+0x1028/0x15b0 [ 807.075596] ? find_held_lock+0x35/0x130 [ 807.079668] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 807.084516] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 807.089373] ? find_held_lock+0x35/0x130 [ 807.093441] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 807.098300] memcg_kmem_charge_memcg+0x7c/0x130 [ 807.102988] ? memcg_kmem_put_cache+0xb0/0xb0 [ 807.107517] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 807.112371] memcg_kmem_charge+0x136/0x300 [ 807.116612] __alloc_pages_nodemask+0x3c6/0x760 [ 807.121289] ? __alloc_pages_slowpath+0x2870/0x2870 [ 807.126317] ? lockdep_hardirqs_on+0x415/0x5d0 [ 807.130903] ? trace_hardirqs_on+0x67/0x230 [ 807.135228] ? kasan_check_read+0x11/0x20 [ 807.139391] copy_process.part.0+0x3e0/0x7970 [ 807.143901] ? mark_held_locks+0x100/0x100 [ 807.148142] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 807.152824] ? __might_fault+0x12b/0x1e0 [ 807.156899] ? __cleanup_sighand+0x70/0x70 [ 807.161143] ? lock_downgrade+0x810/0x810 [ 807.165312] _do_fork+0x257/0xfe0 [ 807.168775] ? fork_idle+0x1d0/0x1d0 [ 807.172506] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 807.177267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 807.182035] ? do_syscall_64+0x26/0x610 [ 807.186019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.191385] ? do_syscall_64+0x26/0x610 [ 807.195369] __x64_sys_clone+0xbf/0x150 [ 807.199351] do_syscall_64+0x103/0x610 [ 807.203251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.208442] RIP: 0033:0x4571fa [ 807.211636] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 807.230539] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 807.238255] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 807.245526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 807.252794] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 807.260063] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 807.267329] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 807.297056] binder: 10050:10076 Acquire 1 refcount change on invalid ref 0 ret -22 01:23:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:42 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) [ 807.355768] binder: 10050:10076 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 807.359822] Task in /syz5 killed as a result of limit of /syz5 [ 807.369954] memory: usage 69248kB, limit 0kB, failcnt 100 [ 807.375523] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.398285] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.412890] Memory cgroup stats for /syz5: cache:0KB rss:47868KB rss_huge:45056KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47720KB inactive_file:0KB active_file:0KB unevictable:0KB 01:23:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="4adc1f123c023f319bd070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 01:23:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) [ 807.525700] Memory cgroup out of memory: Kill process 14477 (syz-executor.5) score 9534000 or sacrifice child [ 807.609859] Killed process 14477 (syz-executor.5) total-vm:72584kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB [ 807.677211] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 807.696115] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 807.704583] CPU: 0 PID: 10049 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 807.711526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.720885] Call Trace: [ 807.723489] dump_stack+0x172/0x1f0 [ 807.727137] dump_header+0x15e/0x929 [ 807.730866] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 807.735990] ? ___ratelimit+0x60/0x595 [ 807.739892] ? do_raw_spin_unlock+0x57/0x270 [ 807.744317] oom_kill_process.cold+0x10/0x6f5 [ 807.748834] ? task_will_free_mem+0x139/0x6e0 [ 807.753354] out_of_memory+0x936/0x12d0 [ 807.757343] ? oom_killer_disable+0x280/0x280 [ 807.761846] ? find_held_lock+0x35/0x130 [ 807.765923] mem_cgroup_out_of_memory+0x1d2/0x240 [ 807.770782] ? memcg_event_wake+0x230/0x230 [ 807.775114] ? do_raw_spin_unlock+0x57/0x270 [ 807.779537] ? _raw_spin_unlock+0x2d/0x50 [ 807.783698] try_charge+0x1028/0x15b0 [ 807.787504] ? find_held_lock+0x35/0x130 [ 807.791580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 807.796434] ? kasan_check_read+0x11/0x20 [ 807.800598] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 807.805459] mem_cgroup_try_charge+0x24d/0x5e0 [ 807.810062] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 807.815003] __handle_mm_fault+0x1e55/0x3f80 [ 807.819429] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 807.824281] ? find_held_lock+0x35/0x130 [ 807.828348] ? handle_mm_fault+0x322/0xb30 [ 807.832598] ? kasan_check_read+0x11/0x20 [ 807.836754] handle_mm_fault+0x43f/0xb30 [ 807.840829] __do_page_fault+0x62a/0xe90 [ 807.844937] ? vmalloc_fault+0x770/0x770 [ 807.849023] ? trace_hardirqs_off_caller+0x65/0x220 [ 807.854044] ? trace_hardirqs_on_caller+0x6a/0x220 [ 807.858986] ? page_fault+0x8/0x30 [ 807.862561] do_page_fault+0x71/0x581 [ 807.866364] ? page_fault+0x8/0x30 [ 807.869909] page_fault+0x1e/0x30 [ 807.873365] RIP: 0033:0x41063f [ 807.876559] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 807.895468] RSP: 002b:00007fff46f9a680 EFLAGS: 00010206 [ 807.900839] RAX: 00007f2b08ed4000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 807.908105] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 807.915375] RBP: 00007fff46f9a760 R08: ffffffffffffffff R09: 0000000000000000 01:23:43 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x33, &(0x7f00000001c0)) tkill(r0, 0xc) [ 807.922646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff46f9a840 [ 807.929920] R13: 00007f2b08ef4700 R14: 0000000000000003 R15: 000000000073bfac [ 807.939915] Task in /syz0 killed as a result of limit of /syz0 [ 807.948282] memory: usage 78464kB, limit 0kB, failcnt 10 [ 807.954170] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.964089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 807.972127] Memory cgroup stats for /syz0: cache:52KB rss:54332KB rss_huge:51200KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54240KB inactive_file:0KB active_file:4KB unevictable:0KB [ 807.999894] Memory cgroup out of memory: Kill process 15605 (syz-executor.0) score 9548000 or sacrifice child [ 808.017069] Killed process 15605 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35840kB, shmem-rss:0kB 01:23:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000000100), 0x1000) read$FUSE(r0, &(0x7f0000004180), 0x1000) [ 808.032126] oom_reaper: reaped process 15605 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 808.050046] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 808.066657] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 808.076472] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 808.083331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.092687] Call Trace: [ 808.095286] dump_stack+0x172/0x1f0 [ 808.098928] dump_header+0x15e/0x929 [ 808.102662] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 808.107778] ? ___ratelimit+0x60/0x595 [ 808.111670] ? do_raw_spin_unlock+0x57/0x270 [ 808.116090] oom_kill_process.cold+0x10/0x6f5 [ 808.120599] ? task_will_free_mem+0x139/0x6e0 [ 808.125114] out_of_memory+0x936/0x12d0 [ 808.129109] ? oom_killer_disable+0x280/0x280 [ 808.133612] ? find_held_lock+0x35/0x130 [ 808.137691] mem_cgroup_out_of_memory+0x1d2/0x240 [ 808.142711] ? memcg_event_wake+0x230/0x230 [ 808.147052] ? do_raw_spin_unlock+0x57/0x270 [ 808.151470] ? _raw_spin_unlock+0x2d/0x50 [ 808.155633] try_charge+0x1028/0x15b0 [ 808.159445] ? find_held_lock+0x35/0x130 [ 808.163525] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 808.168378] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 808.173230] ? find_held_lock+0x35/0x130 [ 808.177304] ? get_mem_cgroup_from_mm+0x10b/0x2b0 01:23:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000745000)={0x0, ""/4096}, 0x230, 0x1, 0x0) [ 808.182166] memcg_kmem_charge_memcg+0x7c/0x130 [ 808.186845] ? memcg_kmem_put_cache+0xb0/0xb0 [ 808.191352] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 808.196208] memcg_kmem_charge+0x136/0x300 [ 808.200460] __alloc_pages_nodemask+0x3c6/0x760 [ 808.205142] ? __alloc_pages_slowpath+0x2870/0x2870 [ 808.210180] ? lockdep_hardirqs_on+0x415/0x5d0 [ 808.214766] ? trace_hardirqs_on+0x67/0x230 [ 808.219101] ? kasan_check_read+0x11/0x20 [ 808.223239] copy_process.part.0+0x3e0/0x7970 [ 808.227742] ? mark_held_locks+0x100/0x100 [ 808.231974] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 808.236631] ? __might_fault+0x12b/0x1e0 [ 808.240698] ? __cleanup_sighand+0x70/0x70 [ 808.244933] ? lock_downgrade+0x810/0x810 [ 808.249093] _do_fork+0x257/0xfe0 [ 808.252536] ? fork_idle+0x1d0/0x1d0 [ 808.256241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 808.261003] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 808.265780] ? do_syscall_64+0x26/0x610 [ 808.269766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.275134] ? do_syscall_64+0x26/0x610 [ 808.279130] __x64_sys_clone+0xbf/0x150 [ 808.283118] do_syscall_64+0x103/0x610 [ 808.287032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.292236] RIP: 0033:0x4571fa [ 808.295417] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 808.314307] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 808.322012] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 808.329274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 808.336543] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 808.343800] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 808.351059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 808.360319] Task in /syz5 killed as a result of limit of /syz5 [ 808.367351] memory: usage 66924kB, limit 0kB, failcnt 106 [ 808.373101] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 808.380062] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 808.380069] Memory cgroup stats for /syz5: cache:0KB rss:45644KB rss_huge:43008KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:45560KB inactive_file:0KB active_file:0KB unevictable:0KB [ 808.410416] Memory cgroup out of memory: Kill process 3338 (syz-executor.5) score 9533000 or sacrifice child [ 808.420578] Killed process 3338 (syz-executor.5) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB [ 808.422000] oom_reaper: reaped process 3338 (syz-executor.5), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 808.444466] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 808.457936] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 808.465043] CPU: 0 PID: 10051 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 808.471996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.481352] Call Trace: [ 808.481375] dump_stack+0x172/0x1f0 [ 808.481398] dump_header+0x15e/0x929 [ 808.481417] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 808.481435] ? ___ratelimit+0x60/0x595 [ 808.481450] ? do_raw_spin_unlock+0x57/0x270 [ 808.481469] oom_kill_process.cold+0x10/0x6f5 [ 808.509209] out_of_memory+0x936/0x12d0 [ 808.513199] ? oom_killer_disable+0x280/0x280 [ 808.517712] mem_cgroup_out_of_memory+0x1d2/0x240 [ 808.522547] ? memcg_event_wake+0x230/0x230 [ 808.526861] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 808.531955] ? cgroup_file_notify+0x140/0x1b0 [ 808.536447] memory_max_write+0x169/0x300 [ 808.540586] ? mem_cgroup_write+0x360/0x360 [ 808.544915] ? lock_acquire+0x16f/0x3f0 [ 808.548885] ? kernfs_fop_write+0x227/0x480 [ 808.553214] cgroup_file_write+0x245/0x7a0 [ 808.557439] ? mem_cgroup_write+0x360/0x360 [ 808.561751] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 808.566675] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 808.571599] kernfs_fop_write+0x2ba/0x480 [ 808.575740] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 808.580501] __vfs_write+0x116/0x820 [ 808.584219] ? retint_kernel+0x2d/0x2d [ 808.588115] ? kernfs_fop_open+0xd90/0xd90 [ 808.592340] ? kernel_read+0x120/0x120 [ 808.596229] ? __lock_is_held+0xb6/0x140 [ 808.600299] ? rcu_read_lock_sched_held+0x110/0x130 [ 808.605320] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 808.610086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 808.615611] ? __sb_start_write+0x1ac/0x360 [ 808.619931] vfs_write+0x20c/0x560 [ 808.623485] ksys_write+0xea/0x1f0 [ 808.627018] ? __ia32_sys_read+0xb0/0xb0 [ 808.631070] ? do_syscall_64+0x26/0x610 [ 808.635037] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.640389] ? do_syscall_64+0x26/0x610 [ 808.644354] __x64_sys_write+0x73/0xb0 [ 808.648230] do_syscall_64+0x103/0x610 [ 808.652109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.657287] RIP: 0033:0x458c29 [ 808.660470] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:23:43 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) [ 808.679356] RSP: 002b:00007f2b08f14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.687088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 808.694341] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 808.701596] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 808.708853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b08f156d4 [ 808.716110] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 808.725574] Task in /syz0 killed as a result of limit of /syz0 [ 808.732343] memory: usage 76136kB, limit 0kB, failcnt 16 [ 808.738254] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 808.759837] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 808.772014] Memory cgroup stats for /syz0: cache:52KB rss:52196KB rss_huge:49152KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52080KB inactive_file:4KB active_file:0KB unevictable:0KB [ 808.799877] Memory cgroup out of memory: Kill process 15622 (syz-executor.0) score 9548000 or sacrifice child [ 808.826643] Killed process 15622 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35840kB, shmem-rss:0kB [ 808.867031] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 808.878943] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 808.884489] CPU: 0 PID: 10049 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 808.891422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.900778] Call Trace: [ 808.903380] dump_stack+0x172/0x1f0 [ 808.907033] dump_header+0x15e/0x929 [ 808.910761] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 808.915874] ? ___ratelimit+0x60/0x595 [ 808.919778] ? do_raw_spin_unlock+0x57/0x270 [ 808.924202] oom_kill_process.cold+0x10/0x6f5 [ 808.928719] ? task_will_free_mem+0x139/0x6e0 [ 808.933233] out_of_memory+0x936/0x12d0 [ 808.937224] ? oom_killer_disable+0x280/0x280 [ 808.941728] ? find_held_lock+0x35/0x130 [ 808.945807] mem_cgroup_out_of_memory+0x1d2/0x240 [ 808.950659] ? memcg_event_wake+0x230/0x230 [ 808.955005] ? do_raw_spin_unlock+0x57/0x270 [ 808.959433] ? _raw_spin_unlock+0x2d/0x50 [ 808.963597] try_charge+0x1028/0x15b0 [ 808.967410] ? find_held_lock+0x35/0x130 [ 808.971489] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 808.976346] ? kasan_check_read+0x11/0x20 [ 808.980513] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 808.985371] mem_cgroup_try_charge+0x24d/0x5e0 [ 808.989981] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 808.994928] __handle_mm_fault+0x1e55/0x3f80 [ 808.999364] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 809.004221] ? find_held_lock+0x35/0x130 [ 809.008289] ? handle_mm_fault+0x322/0xb30 [ 809.012541] ? kasan_check_read+0x11/0x20 [ 809.016699] handle_mm_fault+0x43f/0xb30 [ 809.020776] __do_page_fault+0x62a/0xe90 [ 809.024857] ? vmalloc_fault+0x770/0x770 [ 809.028927] ? trace_hardirqs_off_caller+0x65/0x220 [ 809.033957] ? trace_hardirqs_on_caller+0x6a/0x220 [ 809.038902] ? page_fault+0x8/0x30 [ 809.042456] do_page_fault+0x71/0x581 [ 809.046264] ? page_fault+0x8/0x30 [ 809.049811] page_fault+0x1e/0x30 [ 809.053272] RIP: 0033:0x41063f [ 809.056471] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 809.075372] RSP: 002b:00007fff46f9a680 EFLAGS: 00010206 [ 809.080742] RAX: 00007f2b08ed4000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 809.088021] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 809.095292] RBP: 00007fff46f9a760 R08: ffffffffffffffff R09: 0000000000000000 [ 809.102563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff46f9a840 [ 809.109844] R13: 00007f2b08ef4700 R14: 0000000000000003 R15: 000000000073bfac [ 809.117357] net_ratelimit: 20 callbacks suppressed [ 809.117369] protocol 88fb is buggy, dev hsr_slave_0 [ 809.119780] protocol 88fb is buggy, dev hsr_slave_0 [ 809.122422] protocol 88fb is buggy, dev hsr_slave_1 [ 809.127407] protocol 88fb is buggy, dev hsr_slave_1 [ 809.133608] Task in /syz0 killed as a result of limit of /syz0 [ 809.149446] memory: usage 73812kB, limit 0kB, failcnt 16 [ 809.155053] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.161875] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.168098] Memory cgroup stats for [ 809.168107] /syz0: cache:52KB rss:50036KB rss_huge:47104KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:49920KB inactive_file:0KB active_file:4KB unevictable:0KB [ 809.190656] Memory cgroup out of memory: Kill process 15643 (syz-executor.0) score 9548000 or sacrifice child [ 809.190714] Killed process 15643 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35840kB, shmem-rss:0kB [ 809.213076] oom_reaper: reaped process 15643 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 809.223662] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 809.244398] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 809.250798] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 809.256586] IPVS: ftp: loaded support on port[0] = 21 [ 809.257652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.272180] Call Trace: [ 809.274774] dump_stack+0x172/0x1f0 [ 809.278411] dump_header+0x15e/0x929 [ 809.282130] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 809.282148] ? ___ratelimit+0x60/0x595 [ 809.282163] ? do_raw_spin_unlock+0x57/0x270 [ 809.282182] oom_kill_process.cold+0x10/0x6f5 [ 809.282200] ? task_will_free_mem+0x139/0x6e0 [ 809.295573] out_of_memory+0x936/0x12d0 [ 809.304547] ? oom_killer_disable+0x280/0x280 [ 809.304562] ? find_held_lock+0x35/0x130 [ 809.304587] mem_cgroup_out_of_memory+0x1d2/0x240 [ 809.313028] ? memcg_event_wake+0x230/0x230 [ 809.313049] ? do_raw_spin_unlock+0x57/0x270 [ 809.313066] ? _raw_spin_unlock+0x2d/0x50 [ 809.313086] try_charge+0x1028/0x15b0 [ 809.313104] ? find_held_lock+0x35/0x130 [ 809.322014] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 809.322030] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 809.322046] ? find_held_lock+0x35/0x130 [ 809.322064] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 809.330785] memcg_kmem_charge_memcg+0x7c/0x130 [ 809.330803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 809.330822] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 809.330847] memcg_kmem_charge+0x136/0x300 [ 809.338789] __alloc_pages_nodemask+0x3c6/0x760 [ 809.338809] ? __alloc_pages_slowpath+0x2870/0x2870 [ 809.338828] ? lockdep_hardirqs_on+0x415/0x5d0 [ 809.347713] ? trace_hardirqs_on+0x67/0x230 [ 809.347727] ? kasan_check_read+0x11/0x20 [ 809.347748] copy_process.part.0+0x3e0/0x7970 [ 809.356633] ? mark_held_locks+0x100/0x100 [ 809.356648] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 809.356668] ? __might_fault+0x12b/0x1e0 [ 809.366166] ? __cleanup_sighand+0x70/0x70 [ 809.366191] ? lock_downgrade+0x810/0x810 [ 809.375522] _do_fork+0x257/0xfe0 [ 809.375543] ? fork_idle+0x1d0/0x1d0 [ 809.384435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.384456] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.394041] ? do_syscall_64+0x26/0x610 [ 809.394057] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.394075] ? do_syscall_64+0x26/0x610 [ 809.402517] __x64_sys_clone+0xbf/0x150 [ 809.402537] do_syscall_64+0x103/0x610 [ 809.402555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.402567] RIP: 0033:0x4571fa [ 809.402584] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 809.411278] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 809.411295] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 809.411303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 809.411312] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 809.411320] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 809.411328] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 809.415333] Task in [ 809.420137] /syz5 killed as a result of limit of [ 809.428726] /syz5 [ 809.428744] memory: usage 63912kB, limit 0kB, failcnt 112 [ 809.428753] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.428766] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.438700] Memory cgroup stats for [ 809.448334] /syz5 [ 809.458212] : [ 809.463553] protocol 88fb is buggy, dev hsr_slave_0 [ 809.472599] protocol 88fb is buggy, dev hsr_slave_1 [ 809.478358] cache:0KB [ 809.512285] rss:43464KB [ 809.524304] rss_huge:40960KB [ 809.538875] shmem:76KB [ 809.553647] mapped_file:132KB [ 809.585228] dirty:0KB [ 809.607767] writeback:0KB swap:0KB inactive_anon:0KB active_anon:43376KB inactive_file:0KB active_file:0KB unevictable:0KB [ 809.625406] Memory cgroup out of memory: Kill process 14490 (syz-executor.5) score 9532000 or sacrifice child [ 809.635651] Killed process 14490 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 809.679632] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 809.700197] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 809.706059] CPU: 0 PID: 10051 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 809.712991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.722354] Call Trace: [ 809.724955] dump_stack+0x172/0x1f0 [ 809.728612] dump_header+0x15e/0x929 [ 809.732342] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 809.737455] ? ___ratelimit+0x60/0x595 [ 809.741352] ? do_raw_spin_unlock+0x57/0x270 [ 809.745776] oom_kill_process.cold+0x10/0x6f5 [ 809.750287] ? oom_kill_process+0xa/0x150 [ 809.754449] out_of_memory+0x936/0x12d0 [ 809.758530] ? oom_killer_disable+0x280/0x280 [ 809.763055] mem_cgroup_out_of_memory+0x1d2/0x240 [ 809.767919] ? memcg_event_wake+0x230/0x230 [ 809.772257] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 809.777371] ? cgroup_file_notify+0x140/0x1b0 [ 809.781882] memory_max_write+0x169/0x300 [ 809.786052] ? mem_cgroup_write+0x360/0x360 [ 809.790396] ? lock_acquire+0x16f/0x3f0 [ 809.794397] ? kernfs_fop_write+0x227/0x480 [ 809.798715] cgroup_file_write+0x245/0x7a0 [ 809.802940] ? mem_cgroup_write+0x360/0x360 [ 809.807257] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 809.812190] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 809.817111] kernfs_fop_write+0x2ba/0x480 [ 809.821252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.826011] __vfs_write+0x116/0x820 [ 809.829737] ? retint_kernel+0x2d/0x2d [ 809.833613] ? kernfs_fop_open+0xd90/0xd90 [ 809.837837] ? kernel_read+0x120/0x120 [ 809.841715] ? __lock_is_held+0xb6/0x140 [ 809.845775] ? rcu_read_lock_sched_held+0x110/0x130 [ 809.850786] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 809.855537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 809.861076] ? __sb_start_write+0x1ac/0x360 [ 809.865399] vfs_write+0x20c/0x560 [ 809.868942] ksys_write+0xea/0x1f0 [ 809.872482] ? __ia32_sys_read+0xb0/0xb0 [ 809.876533] ? do_syscall_64+0x26/0x610 [ 809.880495] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.885846] ? do_syscall_64+0x26/0x610 [ 809.889810] __x64_sys_write+0x73/0xb0 [ 809.893687] do_syscall_64+0x103/0x610 [ 809.897580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.902836] RIP: 0033:0x458c29 [ 809.906029] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.925012] RSP: 002b:00007f2b08f14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.932709] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 809.939971] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 809.947227] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.954488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b08f156d4 [ 809.961754] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 809.971233] Task in /syz0 killed as a result of limit of /syz0 [ 809.977627] memory: usage 71436kB, limit 0kB, failcnt 23 [ 809.983273] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.990219] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.996522] Memory cgroup stats for /syz0: cache:52KB rss:47876KB rss_huge:45056KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47760KB inactive_file:4KB active_file:0KB unevictable:0KB [ 810.018681] Memory cgroup out of memory: Kill process 15583 (syz-executor.0) score 9547000 or sacrifice child [ 810.029422] Killed process 15583 (syz-executor.0) total-vm:72848kB, anon-rss:2236kB, file-rss:35820kB, shmem-rss:0kB [ 810.060041] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 810.081593] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 810.087143] CPU: 1 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 810.093991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.103352] Call Trace: [ 810.105949] dump_stack+0x172/0x1f0 [ 810.109597] dump_header+0x15e/0x929 [ 810.113324] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 810.118433] ? ___ratelimit+0x60/0x595 [ 810.122326] ? do_raw_spin_unlock+0x57/0x270 [ 810.126873] oom_kill_process.cold+0x10/0x6f5 [ 810.131380] ? task_will_free_mem+0x139/0x6e0 [ 810.135893] out_of_memory+0x936/0x12d0 [ 810.139882] ? oom_killer_disable+0x280/0x280 [ 810.144381] ? find_held_lock+0x35/0x130 [ 810.148459] mem_cgroup_out_of_memory+0x1d2/0x240 [ 810.153312] ? memcg_event_wake+0x230/0x230 [ 810.157648] ? do_raw_spin_unlock+0x57/0x270 [ 810.162066] ? _raw_spin_unlock+0x2d/0x50 [ 810.166229] try_charge+0x1028/0x15b0 [ 810.170037] ? find_held_lock+0x35/0x130 [ 810.174129] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 810.178985] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 810.183834] ? find_held_lock+0x35/0x130 [ 810.187901] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 810.192765] memcg_kmem_charge_memcg+0x7c/0x130 [ 810.197445] ? memcg_kmem_put_cache+0xb0/0xb0 [ 810.201950] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 810.206809] memcg_kmem_charge+0x136/0x300 [ 810.211053] __alloc_pages_nodemask+0x3c6/0x760 [ 810.215734] ? __alloc_pages_slowpath+0x2870/0x2870 [ 810.220765] ? lockdep_hardirqs_on+0x415/0x5d0 [ 810.225354] ? trace_hardirqs_on+0x67/0x230 [ 810.229678] ? kasan_check_read+0x11/0x20 [ 810.233838] copy_process.part.0+0x3e0/0x7970 [ 810.238353] ? mark_held_locks+0x100/0x100 [ 810.242593] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 810.247272] ? __might_fault+0x12b/0x1e0 [ 810.251350] ? __cleanup_sighand+0x70/0x70 [ 810.255598] ? lock_downgrade+0x810/0x810 [ 810.259765] _do_fork+0x257/0xfe0 [ 810.263230] ? fork_idle+0x1d0/0x1d0 [ 810.266959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 810.271729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 810.276493] ? do_syscall_64+0x26/0x610 [ 810.280484] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.285863] ? do_syscall_64+0x26/0x610 [ 810.289846] __x64_sys_clone+0xbf/0x150 [ 810.293834] do_syscall_64+0x103/0x610 [ 810.297730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.302922] RIP: 0033:0x4571fa [ 810.306123] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 810.325027] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 810.332742] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 810.340018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 810.347289] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 810.354558] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 810.361920] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 810.369491] protocol 88fb is buggy, dev hsr_slave_0 [ 810.374616] protocol 88fb is buggy, dev hsr_slave_1 [ 810.379794] protocol 88fb is buggy, dev hsr_slave_0 [ 810.384883] protocol 88fb is buggy, dev hsr_slave_1 [ 810.419064] Task in /syz5 killed as a result of limit of /syz5 [ 810.425535] memory: usage 61492kB, limit 0kB, failcnt 118 [ 810.437451] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 810.445596] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 810.458117] Memory cgroup stats for /syz5: cache:0KB rss:41284KB rss_huge:38912KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41208KB inactive_file:0KB active_file:0KB unevictable:0KB 01:23:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="4adc1f123c023f319bd070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 01:23:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) [ 810.485942] Memory cgroup out of memory: Kill process 8341 (syz-executor.5) score 9529000 or sacrifice child [ 810.496802] Killed process 8341 (syz-executor.5) total-vm:72716kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB [ 810.541520] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 810.589485] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 810.595178] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 810.602034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.611390] Call Trace: [ 810.613996] dump_stack+0x172/0x1f0 [ 810.617648] dump_header+0x15e/0x929 [ 810.621380] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 810.626499] ? ___ratelimit+0x60/0x595 [ 810.630398] ? do_raw_spin_unlock+0x57/0x270 [ 810.634821] oom_kill_process.cold+0x10/0x6f5 [ 810.639334] ? task_will_free_mem+0x139/0x6e0 [ 810.643838] ? find_held_lock+0x35/0x130 [ 810.647916] out_of_memory+0x936/0x12d0 [ 810.651903] ? lock_downgrade+0x810/0x810 [ 810.656068] ? oom_killer_disable+0x280/0x280 [ 810.660574] ? find_held_lock+0x35/0x130 [ 810.664656] mem_cgroup_out_of_memory+0x1d2/0x240 [ 810.669511] ? memcg_event_wake+0x230/0x230 [ 810.673849] ? do_raw_spin_unlock+0x57/0x270 [ 810.678270] ? _raw_spin_unlock+0x2d/0x50 [ 810.682456] try_charge+0x1028/0x15b0 [ 810.686267] ? find_held_lock+0x35/0x130 [ 810.690351] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 810.695205] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 810.700057] ? find_held_lock+0x35/0x130 [ 810.704132] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 810.709011] memcg_kmem_charge_memcg+0x7c/0x130 [ 810.713705] ? memcg_kmem_put_cache+0xb0/0xb0 [ 810.718213] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 810.723071] memcg_kmem_charge+0x136/0x300 [ 810.727330] __alloc_pages_nodemask+0x3c6/0x760 [ 810.732024] ? __alloc_pages_slowpath+0x2870/0x2870 [ 810.737069] ? lockdep_hardirqs_on+0x415/0x5d0 [ 810.741664] ? trace_hardirqs_on+0x67/0x230 [ 810.746003] ? kasan_check_read+0x11/0x20 [ 810.750175] copy_process.part.0+0x3e0/0x7970 [ 810.754687] ? mark_held_locks+0x100/0x100 [ 810.758931] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 810.763623] ? __might_fault+0x12b/0x1e0 [ 810.767705] ? __cleanup_sighand+0x70/0x70 [ 810.771953] ? lock_downgrade+0x810/0x810 [ 810.776132] _do_fork+0x257/0xfe0 [ 810.779601] ? fork_idle+0x1d0/0x1d0 [ 810.783336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 810.788101] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 810.792867] ? do_syscall_64+0x26/0x610 [ 810.796853] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.802221] ? do_syscall_64+0x26/0x610 [ 810.806207] __x64_sys_clone+0xbf/0x150 [ 810.810197] do_syscall_64+0x103/0x610 [ 810.814100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.819293] RIP: 0033:0x4571fa [ 810.822492] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 810.841397] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 810.849113] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 810.856388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 810.863660] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 810.870938] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 810.878219] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 810.892907] Task in /syz5 killed as a result of limit of /syz5 [ 810.899015] memory: usage 59180kB, limit 0kB, failcnt 124 [ 810.904783] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 810.911615] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 810.911622] Memory cgroup stats for /syz5: cache:0KB rss:39080KB rss_huge:36864KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39024KB inactive_file:0KB active_file:0KB unevictable:0KB [ 810.938721] Memory cgroup out of memory: Kill process 9244 (syz-executor.5) score 9521000 or sacrifice child [ 810.948974] Killed process 9244 (syz-executor.5) total-vm:72452kB, anon-rss:2148kB, file-rss:35804kB, shmem-rss:0kB [ 810.962241] oom_reaper: reaped process 9244 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 810.973129] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 810.987230] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 810.993085] CPU: 0 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 810.999935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.009293] Call Trace: [ 811.009315] dump_stack+0x172/0x1f0 [ 811.009338] dump_header+0x15e/0x929 [ 811.009361] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 811.024358] ? ___ratelimit+0x60/0x595 [ 811.028258] ? do_raw_spin_unlock+0x57/0x270 [ 811.032683] oom_kill_process.cold+0x10/0x6f5 [ 811.037192] ? task_will_free_mem+0x139/0x6e0 [ 811.041703] out_of_memory+0x936/0x12d0 [ 811.045696] ? oom_killer_disable+0x280/0x280 [ 811.050197] ? find_held_lock+0x35/0x130 [ 811.050224] mem_cgroup_out_of_memory+0x1d2/0x240 [ 811.050239] ? memcg_event_wake+0x230/0x230 [ 811.050259] ? do_raw_spin_unlock+0x57/0x270 [ 811.050277] ? _raw_spin_unlock+0x2d/0x50 [ 811.063476] try_charge+0x1028/0x15b0 [ 811.063503] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 811.063526] ? rcu_read_lock_sched_held+0x110/0x130 [ 811.063543] ? __alloc_pages_nodemask+0x63e/0x760 [ 811.080709] ? do_raw_spin_unlock+0x57/0x270 [ 811.090565] memcg_kmem_charge_memcg+0x7c/0x130 [ 811.090582] ? memcg_kmem_put_cache+0xb0/0xb0 [ 811.090595] ? cache_grow_begin+0x59a/0x8c0 [ 811.090614] ? lockdep_hardirqs_on+0x415/0x5d0 [ 811.113057] ? trace_hardirqs_on+0x67/0x230 [ 811.117389] cache_grow_begin+0x25f/0x8c0 [ 811.121549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 811.127097] ? __cpuset_node_allowed+0x136/0x540 [ 811.131867] fallback_alloc+0x1fd/0x2d0 [ 811.135859] ____cache_alloc_node+0x1be/0x1e0 [ 811.140368] kmem_cache_alloc+0x1f3/0x700 [ 811.144525] ? inet_create+0x2f4/0xe10 [ 811.144642] sk_prot_alloc+0x67/0x2e0 [ 811.144661] ? lock_downgrade+0x810/0x810 [ 811.156480] sk_alloc+0x39/0xf70 [ 811.159861] inet_create+0x36a/0xe10 [ 811.163584] __sock_create+0x3e6/0x750 [ 811.167489] __sys_socket+0x103/0x220 [ 811.171291] ? move_addr_to_kernel+0x80/0x80 [ 811.175699] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.180456] ? do_syscall_64+0x26/0x610 [ 811.184442] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.189805] ? do_syscall_64+0x26/0x610 [ 811.193885] __x64_sys_socket+0x73/0xb0 [ 811.197863] do_syscall_64+0x103/0x610 [ 811.201762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.206946] RIP: 0033:0x45b797 [ 811.210143] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.229044] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 811.236757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 811.244024] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 811.251305] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 811.258573] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 811.265837] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 811.279988] Task in /syz0 killed as a result of limit of /syz0 [ 811.286017] memory: usage 66812kB, limit 0kB, failcnt 51 [ 811.308912] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 811.339359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 811.371129] Memory cgroup stats for /syz0: cache:52KB rss:43568KB rss_huge:40960KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43432KB inactive_file:8KB active_file:4KB unevictable:0KB [ 811.406570] Memory cgroup out of memory: Kill process 12617 (syz-executor.0) score 9542000 or sacrifice child [ 811.417844] Killed process 12625 (syz-executor.0) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 811.452557] Memory cgroup out of memory: Kill process 9191 (syz-executor.5) score 9518000 or sacrifice child [ 811.465801] Killed process 9191 (syz-executor.5) total-vm:72452kB, anon-rss:2148kB, file-rss:35796kB, shmem-rss:0kB [ 811.509097] Memory cgroup out of memory: Kill process 12617 (syz-executor.0) score 9542000 or sacrifice child [ 811.520058] Killed process 12617 (syz-executor.0) total-vm:72584kB, anon-rss:2204kB, file-rss:35832kB, shmem-rss:0kB [ 811.550070] Memory cgroup out of memory: Kill process 15274 (syz-executor.5) score 9291000 or sacrifice child [ 811.576995] Killed process 15274 (syz-executor.5) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 811.595845] oom_reaper: reaped process 15274 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 811.606468] Memory cgroup out of memory: Kill process 12574 (syz-executor.0) score 9538000 or sacrifice child [ 811.629082] Killed process 12576 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 811.673032] Memory cgroup out of memory: Kill process 15341 (syz-executor.5) score 9291000 or sacrifice child [ 811.692788] Killed process 15341 (syz-executor.5) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 811.721716] Memory cgroup out of memory: Kill process 15391 (syz-executor.5) score 9291000 or sacrifice child [ 811.739760] Killed process 15391 (syz-executor.5) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 811.765311] Memory cgroup out of memory: Kill process 12574 (syz-executor.0) score 9538000 or sacrifice child [ 811.777596] Killed process 12574 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:35824kB, shmem-rss:0kB [ 811.816851] Memory cgroup out of memory: Kill process 11397 (syz-executor.5) score 9288000 or sacrifice child [ 811.827079] Killed process 11397 (syz-executor.5) total-vm:72848kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 811.844656] oom_reaper: reaped process 11397 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 811.855231] Memory cgroup out of memory: Kill process 12596 (syz-executor.0) score 9538000 or sacrifice child [ 811.871435] Killed process 12599 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 811.886832] oom_reaper: reaped process 12599 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 811.909768] Memory cgroup out of memory: Kill process 20590 (syz-executor.5) score 9287000 or sacrifice child [ 811.928276] Killed process 20590 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 811.965908] oom_kill_process: 10 callbacks suppressed [ 811.965927] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 811.999141] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 812.005539] CPU: 1 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 812.012384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.021722] Call Trace: [ 812.024306] dump_stack+0x172/0x1f0 [ 812.027936] dump_header+0x15e/0x929 [ 812.031653] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 812.036741] ? ___ratelimit+0x60/0x595 [ 812.040629] oom_kill_process.cold+0x10/0x6f5 [ 812.045125] ? task_will_free_mem+0x139/0x6e0 [ 812.049611] out_of_memory+0x936/0x12d0 [ 812.053579] ? oom_killer_disable+0x280/0x280 [ 812.058058] ? find_held_lock+0x35/0x130 [ 812.062127] mem_cgroup_out_of_memory+0x1d2/0x240 [ 812.066969] ? memcg_event_wake+0x230/0x230 [ 812.071293] ? do_raw_spin_unlock+0x57/0x270 [ 812.075700] ? _raw_spin_unlock+0x2d/0x50 [ 812.079847] try_charge+0x1028/0x15b0 [ 812.083662] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 812.088493] ? rcu_read_lock_sched_held+0x110/0x130 [ 812.093520] ? __alloc_pages_nodemask+0x63e/0x760 [ 812.098349] ? do_raw_spin_unlock+0x57/0x270 [ 812.102761] memcg_kmem_charge_memcg+0x7c/0x130 [ 812.107425] ? memcg_kmem_put_cache+0xb0/0xb0 [ 812.111902] ? cache_grow_begin+0x59a/0x8c0 [ 812.116209] ? lockdep_hardirqs_on+0x415/0x5d0 [ 812.120790] ? trace_hardirqs_on+0x67/0x230 [ 812.125105] cache_grow_begin+0x25f/0x8c0 [ 812.129237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 812.134775] ? __cpuset_node_allowed+0x136/0x540 [ 812.139535] fallback_alloc+0x1fd/0x2d0 [ 812.143499] ____cache_alloc_node+0x1be/0x1e0 [ 812.147995] kmem_cache_alloc+0x1f3/0x700 [ 812.152146] ? inet_create+0x2f4/0xe10 [ 812.156037] sk_prot_alloc+0x67/0x2e0 [ 812.159836] ? lock_downgrade+0x810/0x810 [ 812.163988] sk_alloc+0x39/0xf70 [ 812.167341] inet_create+0x36a/0xe10 [ 812.171057] __sock_create+0x3e6/0x750 [ 812.174942] __sys_socket+0x103/0x220 [ 812.178733] ? move_addr_to_kernel+0x80/0x80 [ 812.183137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.187992] ? do_syscall_64+0x26/0x610 [ 812.191955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.197310] ? do_syscall_64+0x26/0x610 [ 812.201284] __x64_sys_socket+0x73/0xb0 [ 812.205262] do_syscall_64+0x103/0x610 [ 812.209152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.214325] RIP: 0033:0x45b797 [ 812.217502] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.236389] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 812.244082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 812.251341] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 812.258602] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 812.265854] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 812.273106] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 812.288256] Task in /syz0 killed as a result of limit of /syz0 [ 812.294571] memory: usage 60976kB, limit 0kB, failcnt 101 [ 812.302085] chnl_net:caif_netlink_parms(): no params data found [ 812.305559] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.315829] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.327639] Memory cgroup stats for /syz0: cache:52KB rss:39160KB rss_huge:36864KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39028KB inactive_file:0KB active_file:4KB unevictable:0KB [ 812.359736] Memory cgroup out of memory: Kill process 12596 (syz-executor.0) score 9538000 or sacrifice child [ 812.377050] Killed process 12596 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:35824kB, shmem-rss:0kB [ 812.389295] oom_reaper: reaped process 12596 (syz-executor.0), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 812.406732] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 812.420207] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 812.425613] CPU: 1 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 812.432450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.441797] Call Trace: [ 812.444391] dump_stack+0x172/0x1f0 [ 812.448028] dump_header+0x15e/0x929 [ 812.451750] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 812.456859] ? ___ratelimit+0x60/0x595 [ 812.460749] ? do_raw_spin_unlock+0x57/0x270 [ 812.465167] oom_kill_process.cold+0x10/0x6f5 [ 812.469670] ? task_will_free_mem+0x139/0x6e0 [ 812.474177] out_of_memory+0x936/0x12d0 [ 812.478163] ? oom_killer_disable+0x280/0x280 [ 812.482659] ? find_held_lock+0x35/0x130 [ 812.486740] mem_cgroup_out_of_memory+0x1d2/0x240 [ 812.491587] ? memcg_event_wake+0x230/0x230 [ 812.495921] ? do_raw_spin_unlock+0x57/0x270 [ 812.500337] ? _raw_spin_unlock+0x2d/0x50 [ 812.504494] try_charge+0x1028/0x15b0 [ 812.508304] ? find_held_lock+0x35/0x130 [ 812.512383] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 812.517233] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 812.522084] ? find_held_lock+0x35/0x130 [ 812.526152] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 812.531019] memcg_kmem_charge_memcg+0x7c/0x130 [ 812.535691] ? memcg_kmem_put_cache+0xb0/0xb0 [ 812.540195] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 812.545047] memcg_kmem_charge+0x136/0x300 [ 812.549288] __alloc_pages_nodemask+0x3c6/0x760 [ 812.553971] ? __alloc_pages_slowpath+0x2870/0x2870 [ 812.559005] ? lockdep_hardirqs_on+0x415/0x5d0 [ 812.563591] ? trace_hardirqs_on+0x67/0x230 [ 812.567916] ? kasan_check_read+0x11/0x20 [ 812.572074] copy_process.part.0+0x3e0/0x7970 [ 812.576581] ? mark_held_locks+0x100/0x100 [ 812.580822] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 812.585502] ? __might_fault+0x12b/0x1e0 [ 812.589580] ? __cleanup_sighand+0x70/0x70 [ 812.593826] ? lock_downgrade+0x810/0x810 [ 812.597998] _do_fork+0x257/0xfe0 [ 812.601464] ? fork_idle+0x1d0/0x1d0 [ 812.605192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.609949] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.614718] ? do_syscall_64+0x26/0x610 [ 812.618698] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.624064] ? do_syscall_64+0x26/0x610 [ 812.628045] __x64_sys_clone+0xbf/0x150 [ 812.632030] do_syscall_64+0x103/0x610 [ 812.635923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.641109] RIP: 0033:0x4571fa [ 812.644287] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 812.663176] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 812.670896] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 812.678158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 812.685411] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 812.692671] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 812.699942] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 812.707516] Task in /syz5 killed as a result of limit of /syz5 [ 812.713978] memory: usage 42784kB, limit 0kB, failcnt 226 [ 812.719580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.726415] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.726423] Memory cgroup stats for /syz5: cache:0KB rss:23936KB rss_huge:22528KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23880KB inactive_file:0KB active_file:0KB unevictable:0KB [ 812.753491] Memory cgroup out of memory: Kill process 20635 (syz-executor.5) score 9287000 or sacrifice child [ 812.763681] Killed process 20635 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 812.777231] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 812.792767] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 812.798333] CPU: 0 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 812.805173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.805179] Call Trace: [ 812.805199] dump_stack+0x172/0x1f0 [ 812.805220] dump_header+0x15e/0x929 [ 812.805237] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 812.805253] ? ___ratelimit+0x60/0x595 [ 812.805267] ? do_raw_spin_unlock+0x57/0x270 [ 812.805285] oom_kill_process.cold+0x10/0x6f5 [ 812.817220] ? task_will_free_mem+0x139/0x6e0 [ 812.846792] out_of_memory+0x936/0x12d0 [ 812.850754] ? oom_killer_disable+0x280/0x280 [ 812.855238] ? find_held_lock+0x35/0x130 [ 812.859286] mem_cgroup_out_of_memory+0x1d2/0x240 [ 812.864116] ? memcg_event_wake+0x230/0x230 [ 812.868426] ? do_raw_spin_unlock+0x57/0x270 [ 812.872819] ? _raw_spin_unlock+0x2d/0x50 [ 812.876973] try_charge+0x1028/0x15b0 [ 812.880779] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 812.885610] ? rcu_read_lock_sched_held+0x110/0x130 [ 812.890609] ? __alloc_pages_nodemask+0x63e/0x760 [ 812.895435] ? do_raw_spin_unlock+0x57/0x270 [ 812.899831] memcg_kmem_charge_memcg+0x7c/0x130 [ 812.904482] ? memcg_kmem_put_cache+0xb0/0xb0 [ 812.908958] ? cache_grow_begin+0x59a/0x8c0 [ 812.913276] ? lockdep_hardirqs_on+0x415/0x5d0 [ 812.917843] ? trace_hardirqs_on+0x67/0x230 [ 812.922151] cache_grow_begin+0x25f/0x8c0 [ 812.926298] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 812.931821] ? __cpuset_node_allowed+0x136/0x540 [ 812.936560] fallback_alloc+0x1fd/0x2d0 [ 812.940521] ____cache_alloc_node+0x1be/0x1e0 [ 812.944999] kmem_cache_alloc+0x1f3/0x700 [ 812.949132] ? inet_create+0x2f4/0xe10 [ 812.953019] sk_prot_alloc+0x67/0x2e0 [ 812.956801] ? lock_downgrade+0x810/0x810 [ 812.960933] sk_alloc+0x39/0xf70 [ 812.964291] inet_create+0x36a/0xe10 [ 812.967993] __sock_create+0x3e6/0x750 [ 812.971869] __sys_socket+0x103/0x220 [ 812.975653] ? move_addr_to_kernel+0x80/0x80 [ 812.980047] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.984784] ? do_syscall_64+0x26/0x610 [ 812.988757] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.994103] ? do_syscall_64+0x26/0x610 [ 812.998060] __x64_sys_socket+0x73/0xb0 [ 813.002042] do_syscall_64+0x103/0x610 [ 813.005913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.011084] RIP: 0033:0x45b797 [ 813.014260] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.033145] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 813.040835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 813.048085] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 813.055338] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 813.062589] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 813.069841] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 813.078877] Task in /syz0 killed as a result of limit of /syz0 [ 813.087389] memory: usage 58640kB, limit 0kB, failcnt 107 [ 813.093032] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.099871] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.099879] Memory cgroup stats for /syz0: cache:52KB rss:36964KB rss_huge:34816KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36856KB inactive_file:0KB active_file:4KB unevictable:0KB [ 813.126973] Memory cgroup out of memory: Kill process 17979 (syz-executor.0) score 9538000 or sacrifice child [ 813.137199] Killed process 17979 (syz-executor.0) total-vm:72716kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB [ 813.150226] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 813.167283] syz-executor.5 cpuset= [ 813.170911] syz5 mems_allowed=0-1 [ 813.170938] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 813.170946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.170958] Call Trace: [ 813.190601] dump_stack+0x172/0x1f0 [ 813.190624] dump_header+0x15e/0x929 [ 813.190641] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 813.190659] ? ___ratelimit+0x60/0x595 [ 813.196853] ? do_raw_spin_unlock+0x57/0x270 [ 813.205642] oom_kill_process.cold+0x10/0x6f5 [ 813.214020] ? task_will_free_mem+0x139/0x6e0 [ 813.222985] out_of_memory+0x936/0x12d0 [ 813.223014] ? oom_killer_disable+0x280/0x280 [ 813.223030] ? find_held_lock+0x35/0x130 [ 813.223055] mem_cgroup_out_of_memory+0x1d2/0x240 [ 813.231494] ? memcg_event_wake+0x230/0x230 [ 813.231515] ? do_raw_spin_unlock+0x57/0x270 [ 813.231532] ? _raw_spin_unlock+0x2d/0x50 [ 813.231551] try_charge+0x1028/0x15b0 [ 813.231569] ? find_held_lock+0x35/0x130 [ 813.240457] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 813.240473] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 813.240489] ? find_held_lock+0x35/0x130 [ 813.240509] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 813.249227] memcg_kmem_charge_memcg+0x7c/0x130 [ 813.249245] ? memcg_kmem_put_cache+0xb0/0xb0 [ 813.257175] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 813.266051] memcg_kmem_charge+0x136/0x300 [ 813.274927] __alloc_pages_nodemask+0x3c6/0x760 [ 813.284418] ? __alloc_pages_slowpath+0x2870/0x2870 [ 813.293758] ? lockdep_hardirqs_on+0x415/0x5d0 [ 813.302638] ? trace_hardirqs_on+0x67/0x230 [ 813.302652] ? kasan_check_read+0x11/0x20 [ 813.302674] copy_process.part.0+0x3e0/0x7970 [ 813.302700] ? mark_held_locks+0x100/0x100 [ 813.312277] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 813.312298] ? __might_fault+0x12b/0x1e0 [ 813.312320] ? __cleanup_sighand+0x70/0x70 [ 813.320773] ? lock_downgrade+0x810/0x810 [ 813.320800] _do_fork+0x257/0xfe0 [ 813.320819] ? fork_idle+0x1d0/0x1d0 [ 813.320842] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 813.329544] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 813.329559] ? do_syscall_64+0x26/0x610 [ 813.329579] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.338295] ? do_syscall_64+0x26/0x610 [ 813.346658] __x64_sys_clone+0xbf/0x150 [ 813.353805] do_syscall_64+0x103/0x610 [ 813.363284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.363296] RIP: 0033:0x4571fa [ 813.363311] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 813.363319] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 813.363338] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 813.372642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 813.372652] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 813.372660] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 813.372668] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 813.373997] Task in [ 813.389825] /syz5 killed as a result of limit of /syz5 [ 813.389850] memory: usage 40480kB, limit 0kB, failcnt 232 [ 813.389860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.389867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.389874] Memory cgroup stats for /syz5: cache:0KB rss:21788KB rss_huge:20480KB shmem:76KB [ 813.412115] mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21732KB inactive_file:0KB active_file:0KB [ 813.427209] unevictable:0KB [ 813.456744] Memory cgroup out of memory: Kill process 20654 (syz-executor.5) score 9287000 or sacrifice child [ 813.464383] Killed process 20654 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 813.496446] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 813.521784] syz-executor.0 cpuset= [ 813.542190] syz0 mems_allowed=0-1 [ 813.547346] CPU: 0 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 813.554186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.563534] Call Trace: [ 813.563555] dump_stack+0x172/0x1f0 [ 813.563577] dump_header+0x15e/0x929 [ 813.563594] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 813.563616] ? ___ratelimit+0x60/0x595 [ 813.569806] ? do_raw_spin_unlock+0x57/0x270 [ 813.569826] oom_kill_process.cold+0x10/0x6f5 [ 813.569846] ? task_will_free_mem+0x139/0x6e0 [ 813.569867] out_of_memory+0x936/0x12d0 [ 813.578665] ? oom_killer_disable+0x280/0x280 [ 813.586941] ? find_held_lock+0x35/0x130 [ 813.595914] mem_cgroup_out_of_memory+0x1d2/0x240 [ 813.604356] ? memcg_event_wake+0x230/0x230 [ 813.613236] ? do_raw_spin_unlock+0x57/0x270 [ 813.613254] ? _raw_spin_unlock+0x2d/0x50 [ 813.613272] try_charge+0x1028/0x15b0 [ 813.613296] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 813.613319] ? rcu_read_lock_sched_held+0x110/0x130 [ 813.622026] ? __alloc_pages_nodemask+0x63e/0x760 [ 813.622040] ? do_raw_spin_unlock+0x57/0x270 [ 813.622064] memcg_kmem_charge_memcg+0x7c/0x130 [ 813.622082] ? memcg_kmem_put_cache+0xb0/0xb0 [ 813.630090] ? cache_grow_begin+0x59a/0x8c0 [ 813.630108] ? lockdep_hardirqs_on+0x415/0x5d0 [ 813.630126] ? trace_hardirqs_on+0x67/0x230 [ 813.630142] cache_grow_begin+0x25f/0x8c0 [ 813.639994] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 813.640016] ? __cpuset_node_allowed+0x136/0x540 [ 813.640033] fallback_alloc+0x1fd/0x2d0 [ 813.649350] ____cache_alloc_node+0x1be/0x1e0 [ 813.649371] kmem_cache_alloc+0x1f3/0x700 [ 813.698997] ? inet_create+0x2f4/0xe10 [ 813.702889] sk_prot_alloc+0x67/0x2e0 [ 813.706686] ? lock_downgrade+0x810/0x810 [ 813.710818] sk_alloc+0x39/0xf70 [ 813.714168] inet_create+0x36a/0xe10 [ 813.717869] __sock_create+0x3e6/0x750 [ 813.721741] __sys_socket+0x103/0x220 [ 813.725523] ? move_addr_to_kernel+0x80/0x80 [ 813.729921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 813.734659] ? do_syscall_64+0x26/0x610 [ 813.738617] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.743970] ? do_syscall_64+0x26/0x610 [ 813.747929] __x64_sys_socket+0x73/0xb0 [ 813.751888] do_syscall_64+0x103/0x610 [ 813.755761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.760949] RIP: 0033:0x45b797 [ 813.764133] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.783042] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 813.790739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 813.797990] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 813.805257] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 813.812513] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 813.819780] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 813.828428] Task in /syz0 killed as a result of limit of /syz0 [ 813.834605] memory: usage 56220kB, limit 0kB, failcnt 113 [ 813.840255] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.847044] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 813.853455] Memory cgroup stats for /syz0: cache:52KB rss:34808KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34692KB inactive_file:0KB active_file:4KB unevictable:0KB [ 813.874322] Memory cgroup out of memory: Kill process 18029 (syz-executor.0) score 9538000 or sacrifice child [ 813.884539] Killed process 18029 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB [ 813.910599] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 813.925231] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 813.930723] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 813.937574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.946948] Call Trace: [ 813.949553] dump_stack+0x172/0x1f0 [ 813.953193] dump_header+0x15e/0x929 [ 813.956913] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 813.962050] ? ___ratelimit+0x60/0x595 [ 813.965942] ? do_raw_spin_unlock+0x57/0x270 [ 813.970368] oom_kill_process.cold+0x10/0x6f5 [ 813.974872] ? task_will_free_mem+0x139/0x6e0 [ 813.979381] out_of_memory+0x936/0x12d0 [ 813.983368] ? oom_killer_disable+0x280/0x280 [ 813.987870] ? find_held_lock+0x35/0x130 [ 813.991945] mem_cgroup_out_of_memory+0x1d2/0x240 [ 813.996798] ? memcg_event_wake+0x230/0x230 [ 814.001130] ? do_raw_spin_unlock+0x57/0x270 [ 814.005544] ? _raw_spin_unlock+0x2d/0x50 [ 814.009699] try_charge+0x1028/0x15b0 [ 814.013503] ? find_held_lock+0x35/0x130 [ 814.017577] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 814.022420] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 814.027259] ? find_held_lock+0x35/0x130 [ 814.031324] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 814.036155] memcg_kmem_charge_memcg+0x7c/0x130 [ 814.040810] ? memcg_kmem_put_cache+0xb0/0xb0 [ 814.045306] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 814.050137] memcg_kmem_charge+0x136/0x300 [ 814.054356] __alloc_pages_nodemask+0x3c6/0x760 [ 814.059014] ? __alloc_pages_slowpath+0x2870/0x2870 [ 814.064021] ? lockdep_hardirqs_on+0x415/0x5d0 [ 814.068589] ? trace_hardirqs_on+0x67/0x230 [ 814.072905] ? kasan_check_read+0x11/0x20 [ 814.077040] copy_process.part.0+0x3e0/0x7970 [ 814.081523] ? mark_held_locks+0x100/0x100 [ 814.085755] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 814.090410] ? __might_fault+0x12b/0x1e0 [ 814.094456] ? __cleanup_sighand+0x70/0x70 [ 814.098673] ? lock_downgrade+0x810/0x810 [ 814.102857] _do_fork+0x257/0xfe0 [ 814.106295] ? fork_idle+0x1d0/0x1d0 [ 814.109999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.114742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.119482] ? do_syscall_64+0x26/0x610 [ 814.123504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.128856] ? do_syscall_64+0x26/0x610 [ 814.132820] __x64_sys_clone+0xbf/0x150 [ 814.136795] do_syscall_64+0x103/0x610 [ 814.140669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.145842] RIP: 0033:0x4571fa [ 814.149021] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 814.167908] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 814.175597] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 814.182860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 814.190110] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 814.197363] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 814.204616] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 814.213021] Task in /syz5 killed as a result of limit of /syz5 [ 814.219064] memory: usage 38060kB, limit 0kB, failcnt 238 [ 814.224695] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 814.231519] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 814.231527] Memory cgroup stats for /syz5: cache:0KB rss:19628KB rss_huge:18432KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19572KB inactive_file:0KB active_file:0KB unevictable:0KB [ 814.231634] Memory cgroup out of memory: Kill process 20688 (syz-executor.5) score 9287000 or sacrifice child [ 814.231690] Killed process 20688 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 814.280610] oom_reaper: reaped process 20688 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 814.291156] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 814.304899] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 814.310408] CPU: 0 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 814.317247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.326602] Call Trace: [ 814.326627] dump_stack+0x172/0x1f0 [ 814.326647] dump_header+0x15e/0x929 [ 814.326663] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 814.326678] ? ___ratelimit+0x60/0x595 [ 814.326692] ? do_raw_spin_unlock+0x57/0x270 [ 814.326712] oom_kill_process.cold+0x10/0x6f5 [ 814.332918] ? task_will_free_mem+0x139/0x6e0 [ 814.341735] out_of_memory+0x936/0x12d0 [ 814.341758] ? oom_killer_disable+0x280/0x280 [ 814.341772] ? find_held_lock+0x35/0x130 [ 814.341800] mem_cgroup_out_of_memory+0x1d2/0x240 [ 814.350069] ? memcg_event_wake+0x230/0x230 [ 814.350090] ? do_raw_spin_unlock+0x57/0x270 [ 814.350107] ? _raw_spin_unlock+0x2d/0x50 [ 814.350125] try_charge+0x1028/0x15b0 [ 814.350148] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 814.359123] ? rcu_read_lock_sched_held+0x110/0x130 [ 814.359143] ? __alloc_pages_nodemask+0x63e/0x760 [ 814.367589] ? do_raw_spin_unlock+0x57/0x270 [ 814.380775] memcg_kmem_charge_memcg+0x7c/0x130 [ 814.389296] ? memcg_kmem_put_cache+0xb0/0xb0 [ 814.389310] ? cache_grow_begin+0x59a/0x8c0 [ 814.389329] ? lockdep_hardirqs_on+0x415/0x5d0 [ 814.402952] ? trace_hardirqs_on+0x67/0x230 [ 814.402980] cache_grow_begin+0x25f/0x8c0 [ 814.402998] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 814.403019] ? __cpuset_node_allowed+0x136/0x540 [ 814.403036] fallback_alloc+0x1fd/0x2d0 [ 814.403054] ____cache_alloc_node+0x1be/0x1e0 [ 814.412294] kmem_cache_alloc+0x1f3/0x700 [ 814.412310] ? inet_create+0x2f4/0xe10 [ 814.412332] sk_prot_alloc+0x67/0x2e0 [ 814.412351] ? lock_downgrade+0x810/0x810 [ 814.421522] sk_alloc+0x39/0xf70 [ 814.421542] inet_create+0x36a/0xe10 [ 814.421563] __sock_create+0x3e6/0x750 [ 814.421581] __sys_socket+0x103/0x220 [ 814.430458] ? move_addr_to_kernel+0x80/0x80 [ 814.430474] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.430488] ? do_syscall_64+0x26/0x610 [ 814.430508] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.438957] ? do_syscall_64+0x26/0x610 [ 814.438989] __x64_sys_socket+0x73/0xb0 [ 814.439006] do_syscall_64+0x103/0x610 [ 814.449280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.449298] RIP: 0033:0x45b797 [ 814.526794] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.545686] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 814.553398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 814.560653] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 814.567904] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 814.575156] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 814.582408] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 814.590052] net_ratelimit: 20 callbacks suppressed [ 814.590060] protocol 88fb is buggy, dev hsr_slave_0 [ 814.599926] protocol 88fb is buggy, dev hsr_slave_0 [ 814.600201] protocol 88fb is buggy, dev hsr_slave_1 [ 814.605123] protocol 88fb is buggy, dev hsr_slave_1 [ 814.611267] Task in /syz0 killed as a result of limit of /syz0 [ 814.615249] protocol 88fb is buggy, dev hsr_slave_0 [ 814.621234] memory: usage 53896kB, limit 0kB, failcnt 119 [ 814.626266] protocol 88fb is buggy, dev hsr_slave_1 [ 814.631823] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 814.643651] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 814.649837] Memory cgroup stats for /syz0: cache:52KB rss:32644KB rss_huge:30720KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32536KB inactive_file:0KB active_file:4KB unevictable:0KB [ 814.650772] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.670672] Memory cgroup out of memory: Kill process 18069 (syz-executor.0) score 9538000 or sacrifice child [ 814.671177] Killed process 18069 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB [ 814.685603] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.701542] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 814.717902] device bridge_slave_0 entered promiscuous mode [ 814.718904] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 814.729056] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 814.735893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.745247] Call Trace: [ 814.745271] dump_stack+0x172/0x1f0 [ 814.745291] dump_header+0x15e/0x929 [ 814.745308] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 814.745324] ? ___ratelimit+0x60/0x595 [ 814.745343] ? do_raw_spin_unlock+0x57/0x270 [ 814.751547] oom_kill_process.cold+0x10/0x6f5 [ 814.760341] ? task_will_free_mem+0x139/0x6e0 [ 814.760363] out_of_memory+0x936/0x12d0 [ 814.760386] ? oom_killer_disable+0x280/0x280 [ 814.760404] ? find_held_lock+0x35/0x130 [ 814.766267] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.768680] mem_cgroup_out_of_memory+0x1d2/0x240 [ 814.777650] ? memcg_event_wake+0x230/0x230 [ 814.782071] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.786098] ? do_raw_spin_unlock+0x57/0x270 [ 814.796449] ? _raw_spin_unlock+0x2d/0x50 [ 814.805588] try_charge+0x1028/0x15b0 [ 814.816295] ? find_held_lock+0x35/0x130 [ 814.821766] device bridge_slave_1 entered promiscuous mode [ 814.824223] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 814.833897] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 814.833915] ? find_held_lock+0x35/0x130 [ 814.833931] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 814.833958] memcg_kmem_charge_memcg+0x7c/0x130 [ 814.833985] ? memcg_kmem_put_cache+0xb0/0xb0 [ 814.843675] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 814.852571] memcg_kmem_charge+0x136/0x300 [ 814.852589] __alloc_pages_nodemask+0x3c6/0x760 [ 814.852606] ? __alloc_pages_slowpath+0x2870/0x2870 [ 814.852627] ? lockdep_hardirqs_on+0x415/0x5d0 [ 814.852646] ? trace_hardirqs_on+0x67/0x230 [ 814.889295] ? kasan_check_read+0x11/0x20 [ 814.893432] copy_process.part.0+0x3e0/0x7970 [ 814.897918] ? mark_held_locks+0x100/0x100 [ 814.902150] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 814.906805] ? __might_fault+0x12b/0x1e0 [ 814.910855] ? __cleanup_sighand+0x70/0x70 [ 814.915074] ? lock_downgrade+0x810/0x810 [ 814.919210] _do_fork+0x257/0xfe0 [ 814.922651] ? fork_idle+0x1d0/0x1d0 [ 814.926372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.931140] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.935931] ? do_syscall_64+0x26/0x610 [ 814.939925] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.945298] ? do_syscall_64+0x26/0x610 [ 814.949260] __x64_sys_clone+0xbf/0x150 [ 814.953237] do_syscall_64+0x103/0x610 [ 814.957141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.962315] RIP: 0033:0x4571fa [ 814.965491] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 814.984392] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 814.992083] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 814.999335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 815.006584] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 815.013838] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 815.021089] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 815.029403] Task in /syz5 killed as a result of limit of /syz5 [ 815.035528] memory: usage 35756kB, limit 0kB, failcnt 244 [ 815.041169] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.047943] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.054189] Memory cgroup stats for /syz5: cache:0KB rss:17480KB rss_huge:16384KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17424KB inactive_file:0KB active_file:0KB unevictable:0KB [ 815.075145] Memory cgroup out of memory: Kill process 20710 (syz-executor.5) score 9287000 or sacrifice child [ 815.085333] Killed process 20710 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 815.112883] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 815.126729] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 815.132606] CPU: 0 PID: 7774 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 815.139454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.148806] Call Trace: [ 815.151405] dump_stack+0x172/0x1f0 [ 815.155055] dump_header+0x15e/0x929 [ 815.158775] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 815.163884] ? ___ratelimit+0x60/0x595 [ 815.167771] ? do_raw_spin_unlock+0x57/0x270 [ 815.172192] oom_kill_process.cold+0x10/0x6f5 [ 815.176697] ? task_will_free_mem+0x139/0x6e0 [ 815.181205] out_of_memory+0x936/0x12d0 [ 815.185196] ? oom_killer_disable+0x280/0x280 [ 815.189695] ? find_held_lock+0x35/0x130 [ 815.193773] mem_cgroup_out_of_memory+0x1d2/0x240 [ 815.198618] ? memcg_event_wake+0x230/0x230 [ 815.202950] ? do_raw_spin_unlock+0x57/0x270 [ 815.207370] ? _raw_spin_unlock+0x2d/0x50 [ 815.211529] try_charge+0x1028/0x15b0 [ 815.215345] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 815.220203] ? rcu_read_lock_sched_held+0x110/0x130 [ 815.225221] ? __alloc_pages_nodemask+0x63e/0x760 [ 815.230060] ? do_raw_spin_unlock+0x57/0x270 [ 815.234471] memcg_kmem_charge_memcg+0x7c/0x130 [ 815.239125] ? memcg_kmem_put_cache+0xb0/0xb0 [ 815.243603] ? cache_grow_begin+0x59a/0x8c0 [ 815.247908] ? lockdep_hardirqs_on+0x415/0x5d0 [ 815.252474] ? trace_hardirqs_on+0x67/0x230 [ 815.256779] cache_grow_begin+0x25f/0x8c0 [ 815.260914] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 815.266438] ? __cpuset_node_allowed+0x136/0x540 [ 815.271180] fallback_alloc+0x1fd/0x2d0 [ 815.275140] ____cache_alloc_node+0x1be/0x1e0 [ 815.279619] kmem_cache_alloc+0x1f3/0x700 [ 815.283760] ? inet_create+0x2f4/0xe10 [ 815.287633] sk_prot_alloc+0x67/0x2e0 [ 815.291415] ? lock_downgrade+0x810/0x810 [ 815.295547] sk_alloc+0x39/0xf70 [ 815.298909] inet_create+0x36a/0xe10 [ 815.302623] __sock_create+0x3e6/0x750 [ 815.306493] __sys_socket+0x103/0x220 [ 815.310276] ? move_addr_to_kernel+0x80/0x80 [ 815.314682] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.319420] ? do_syscall_64+0x26/0x610 [ 815.323376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.328734] ? do_syscall_64+0x26/0x610 [ 815.332694] __x64_sys_socket+0x73/0xb0 [ 815.336652] do_syscall_64+0x103/0x610 [ 815.340567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.345737] RIP: 0033:0x45b797 [ 815.348919] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.369797] RSP: 002b:00007fff46f9a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 815.377488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 815.384739] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 815.391988] RBP: 0000000000006af1 R08: 0000000000000000 R09: 000000000000000a [ 815.399239] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 815.406491] R13: 00007fff46f9a940 R14: 00000000000c5016 R15: 00007fff46f9a950 [ 815.414080] protocol 88fb is buggy, dev hsr_slave_0 [ 815.419149] protocol 88fb is buggy, dev hsr_slave_1 [ 815.419867] protocol 88fb is buggy, dev hsr_slave_0 [ 815.425250] Task in /syz0 killed as a result of limit of /syz0 [ 815.429248] protocol 88fb is buggy, dev hsr_slave_1 [ 815.435235] memory: usage 51456kB, limit 0kB, failcnt 125 [ 815.445803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.452783] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.458972] Memory cgroup stats for [ 815.462774] /syz0: cache:52KB rss:30488KB rss_huge:28672KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30380KB inactive_file:0KB active_file:4KB unevictable:0KB [ 815.481503] Memory cgroup out of memory: Kill process 18105 (syz-executor.0) score 9538000 or sacrifice child [ 815.481574] Killed process 18105 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35800kB, shmem-rss:0kB [ 815.490108] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 815.510219] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 815.520716] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 815.527554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.527564] Call Trace: [ 815.539529] dump_stack+0x172/0x1f0 [ 815.539552] dump_header+0x15e/0x929 [ 815.539571] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 815.547578] ? ___ratelimit+0x60/0x595 [ 815.556538] ? do_raw_spin_unlock+0x57/0x270 [ 815.560950] oom_kill_process.cold+0x10/0x6f5 [ 815.560980] ? task_will_free_mem+0x139/0x6e0 [ 815.561002] out_of_memory+0x936/0x12d0 [ 815.561029] ? oom_killer_disable+0x280/0x280 [ 815.569995] ? find_held_lock+0x35/0x130 [ 815.570028] mem_cgroup_out_of_memory+0x1d2/0x240 [ 815.570044] ? memcg_event_wake+0x230/0x230 [ 815.570062] ? do_raw_spin_unlock+0x57/0x270 [ 815.578516] ? _raw_spin_unlock+0x2d/0x50 [ 815.587402] try_charge+0x1028/0x15b0 [ 815.596110] ? find_held_lock+0x35/0x130 [ 815.604037] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 815.612893] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 815.612910] ? find_held_lock+0x35/0x130 [ 815.612927] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 815.612954] memcg_kmem_charge_memcg+0x7c/0x130 [ 815.612982] ? memcg_kmem_put_cache+0xb0/0xb0 [ 815.621864] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 815.621884] memcg_kmem_charge+0x136/0x300 [ 815.621906] __alloc_pages_nodemask+0x3c6/0x760 [ 815.631396] ? __alloc_pages_slowpath+0x2870/0x2870 [ 815.631418] ? lockdep_hardirqs_on+0x415/0x5d0 [ 815.631435] ? trace_hardirqs_on+0x67/0x230 [ 815.631452] ? kasan_check_read+0x11/0x20 [ 815.640765] copy_process.part.0+0x3e0/0x7970 [ 815.640787] ? mark_held_locks+0x100/0x100 [ 815.640805] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 815.649689] ? __might_fault+0x12b/0x1e0 [ 815.649713] ? __cleanup_sighand+0x70/0x70 [ 815.649731] ? lock_downgrade+0x810/0x810 [ 815.649757] _do_fork+0x257/0xfe0 [ 815.697067] ? fork_idle+0x1d0/0x1d0 [ 815.700774] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.705512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.710266] ? do_syscall_64+0x26/0x610 [ 815.714238] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.719584] ? do_syscall_64+0x26/0x610 [ 815.723545] __x64_sys_clone+0xbf/0x150 [ 815.727506] do_syscall_64+0x103/0x610 [ 815.731383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.736554] RIP: 0033:0x4571fa [ 815.739731] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 815.758622] RSP: 002b:00007ffdf53f87d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 815.766338] RAX: ffffffffffffffda RBX: 00007ffdf53f87d0 RCX: 00000000004571fa [ 815.773594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 815.780846] RBP: 00007ffdf53f8810 R08: 0000000000000001 R09: 0000000000de0940 [ 815.788115] R10: 0000000000de0c10 R11: 0000000000000246 R12: 0000000000000001 [ 815.795387] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf53f8860 [ 815.805043] Task in /syz5 killed as a result of limit of /syz5 [ 815.811120] memory: usage 33444kB, limit 0kB, failcnt 250 [ 815.811130] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.811139] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.811146] Memory cgroup stats for /syz5: cache:0KB rss:15332KB rss_huge:14336KB shmem:76KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15276KB inactive_file:0KB active_file:0KB unevictable:0KB [ 815.811251] Memory cgroup out of memory: Kill process 20734 (syz-executor.5) score 9287000 or sacrifice child [ 815.811312] Killed process 20734 (syz-executor.5) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 815.812463] oom_reaper: reaped process 20734 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 815.823916] Memory cgroup out of memory: Kill process 3886 (syz-executor.0) score 9537000 or sacrifice child [ 815.862909] Killed process 3886 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 815.904401] oom_reaper: reaped process 3886 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 815.922492] Memory cgroup out of memory: Kill process 11360 (syz-executor.5) score 9286000 or sacrifice child [ 815.940906] Killed process 11360 (syz-executor.5) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 815.950004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 815.965510] Memory cgroup out of memory: Kill process 8754 (syz-executor.0) score 9529000 or sacrifice child [ 815.977326] Killed process 8754 (syz-executor.0) total-vm:72716kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB [ 815.977627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 815.997811] Memory cgroup out of memory: Kill process 11419 (syz-executor.5) score 9286000 or sacrifice child [ 816.014789] Killed process 11419 (syz-executor.5) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 816.039697] Memory cgroup out of memory: Kill process 8799 (syz-executor.0) score 9528000 or sacrifice child [ 816.051175] Killed process 8799 (syz-executor.0) total-vm:72584kB, anon-rss:2192kB, file-rss:35788kB, shmem-rss:0kB [ 816.070254] Memory cgroup out of memory: Kill process 11456 (syz-executor.5) score 9286000 or sacrifice child [ 816.084244] Killed process 11456 (syz-executor.5) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 816.096602] oom_reaper: reaped process 11456 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.102089] Memory cgroup out of memory: Kill process 8852 (syz-executor.0) score 9528000 or sacrifice child [ 816.123639] Killed process 8852 (syz-executor.0) total-vm:72584kB, anon-rss:2192kB, file-rss:35788kB, shmem-rss:0kB [ 816.137643] oom_reaper: reaped process 8852 (syz-executor.0), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 816.154088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 816.154518] Memory cgroup out of memory: Kill process 11491 (syz-executor.5) score 9286000 or sacrifice child [ 816.163291] team0: Port device team_slave_0 added [ 816.177300] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 816.185344] team0: Port device team_slave_1 added [ 816.188661] Killed process 11491 (syz-executor.5) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 816.208980] Memory cgroup out of memory: Kill process 8911 (syz-executor.0) score 9528000 or sacrifice child [ 816.219520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 816.228526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 816.235890] Killed process 8911 (syz-executor.0) total-vm:72584kB, anon-rss:2192kB, file-rss:35788kB, shmem-rss:0kB [ 816.248089] oom_reaper: reaped process 8911 (syz-executor.0), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 816.252172] Memory cgroup out of memory: Kill process 21241 (syz-executor.0) score 9290000 or sacrifice child [ 816.272254] Killed process 21241 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 816.284455] oom_reaper: reaped process 21241 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 816.290809] Memory cgroup out of memory: Kill process 12566 (syz-executor.5) score 9284000 or sacrifice child [ 816.307838] Killed process 12566 (syz-executor.5) total-vm:72584kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 816.319222] oom_reaper: reaped process 12566 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.319806] Memory cgroup out of memory: Kill process 21287 (syz-executor.0) score 9290000 or sacrifice child [ 816.346938] Killed process 21287 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 816.360133] oom_reaper: reaped process 21287 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 816.370651] Memory cgroup out of memory: Kill process 12629 (syz-executor.5) score 9284000 or sacrifice child [ 816.382835] Killed process 12629 (syz-executor.5) total-vm:72584kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 816.408854] Memory cgroup out of memory: Kill process 21297 (syz-executor.0) score 9290000 or sacrifice child [ 816.421842] Killed process 21297 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 816.433359] Memory cgroup out of memory: Kill process 7792 (syz-executor.5) score 8988000 or sacrifice child [ 816.433435] oom_reaper: reaped process 21297 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.445405] Killed process 7792 (syz-executor.5) total-vm:72320kB, anon-rss:116kB, file-rss:35712kB, shmem-rss:0kB [ 816.477027] Memory cgroup out of memory: Kill process 24877 (syz-executor.0) score 9290000 or sacrifice child [ 816.477491] oom_reaper: reaped process 7792 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 816.488774] Killed process 24877 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 816.525243] Memory cgroup out of memory: Kill process 25159 (syz-executor.0) score 9290000 or sacrifice child [ 816.535468] Killed process 25159 (syz-executor.0) total-vm:72584kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 816.547486] oom_reaper: reaped process 25159 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.556851] Memory cgroup out of memory: Kill process 21263 (syz-executor.0) score 9288000 or sacrifice child [ 816.573212] Killed process 21263 (syz-executor.0) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 816.586072] oom_reaper: reaped process 21263 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.598329] Memory cgroup out of memory: Kill process 21309 (syz-executor.0) score 9288000 or sacrifice child [ 816.608575] Killed process 21309 (syz-executor.0) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 816.623285] device hsr_slave_0 entered promiscuous mode [ 816.630198] oom_reaper: reaped process 21309 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.646680] Memory cgroup out of memory: Kill process 21433 (syz-executor.0) score 9288000 or sacrifice child [ 816.657199] Killed process 21433 (syz-executor.0) total-vm:72452kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 816.676263] oom_reaper: reaped process 21433 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 816.680073] device hsr_slave_1 entered promiscuous mode [ 816.693042] Memory cgroup out of memory: Kill process 7774 (syz-executor.0) score 8989000 or sacrifice child [ 816.703409] Killed process 7774 (syz-executor.0) total-vm:72320kB, anon-rss:120kB, file-rss:35712kB, shmem-rss:0kB [ 816.715625] oom_reaper: reaped process 7774 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 816.915805] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 816.953888] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 01:23:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 817.218480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 817.291841] device bridge_slave_1 left promiscuous mode [ 817.300866] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.350444] device bridge_slave_0 left promiscuous mode [ 817.355905] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.522149] device hsr_slave_1 left promiscuous mode [ 820.563610] device hsr_slave_0 left promiscuous mode [ 820.603629] team0 (unregistering): Port device team_slave_1 removed [ 820.616209] team0 (unregistering): Port device team_slave_0 removed [ 820.627342] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 820.673679] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 820.758463] bond0 (unregistering): Released all slaves [ 820.819751] net_ratelimit: 20 callbacks suppressed [ 820.819807] protocol 88fb is buggy, dev hsr_slave_1 [ 820.824742] protocol 88fb is buggy, dev hsr_slave_0 [ 820.824796] protocol 88fb is buggy, dev hsr_slave_1 [ 820.834902] protocol 88fb is buggy, dev hsr_slave_0 [ 820.844930] protocol 88fb is buggy, dev hsr_slave_1 [ 820.859397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.873844] IPVS: ftp: loaded support on port[0] = 21 [ 820.875161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 820.906554] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 820.916597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 820.923736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 820.946998] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 820.953302] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.978306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 820.999203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 821.007351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.015146] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.021552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.030113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 821.039610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.047186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 821.055463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.063310] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.069708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.078744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 821.088679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 821.142221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 821.178507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 821.195368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 821.218788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 821.228283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 821.238835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 821.252804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 821.261126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 821.269073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 821.277690] chnl_net:caif_netlink_parms(): no params data found [ 821.299442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 821.316464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 821.327710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 821.367096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 821.379118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 821.396573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 821.405877] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.418548] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.427457] device bridge_slave_0 entered promiscuous mode [ 821.443811] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 821.456877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 821.468766] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.482978] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.495642] device bridge_slave_1 entered promiscuous mode [ 821.522793] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 821.558253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.569735] protocol 88fb is buggy, dev hsr_slave_0 [ 821.574819] protocol 88fb is buggy, dev hsr_slave_1 [ 821.589473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 821.607468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 821.619741] protocol 88fb is buggy, dev hsr_slave_0 [ 821.619746] protocol 88fb is buggy, dev hsr_slave_0 [ 821.619804] protocol 88fb is buggy, dev hsr_slave_1 [ 821.658478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 821.674104] team0: Port device team_slave_0 added [ 821.684225] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 821.696111] team0: Port device team_slave_1 added [ 821.740472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 821.747942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 821.873945] oom_kill_process: 21 callbacks suppressed [ 821.873977] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 821.902548] device hsr_slave_0 entered promiscuous mode [ 821.904924] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 821.914008] CPU: 0 PID: 10493 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 821.920950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.930313] Call Trace: [ 821.932912] dump_stack+0x172/0x1f0 [ 821.936555] dump_header+0x15e/0x929 [ 821.940278] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 821.945389] ? ___ratelimit+0x60/0x595 [ 821.949292] oom_kill_process.cold+0x10/0x6f5 [ 821.953800] ? task_will_free_mem+0x139/0x6e0 [ 821.958304] ? find_held_lock+0x35/0x130 [ 821.962379] out_of_memory+0x936/0x12d0 [ 821.966364] ? lock_downgrade+0x810/0x810 [ 821.970519] ? oom_killer_disable+0x280/0x280 [ 821.975031] ? find_held_lock+0x35/0x130 [ 821.979110] mem_cgroup_out_of_memory+0x1d2/0x240 [ 821.983997] ? memcg_event_wake+0x230/0x230 [ 821.988339] ? do_raw_spin_unlock+0x57/0x270 [ 821.992754] ? _raw_spin_unlock+0x2d/0x50 [ 821.996909] try_charge+0x1028/0x15b0 [ 822.000712] ? find_held_lock+0x35/0x130 [ 822.004797] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 822.009646] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 822.014496] ? find_held_lock+0x35/0x130 [ 822.018563] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 822.023426] memcg_kmem_charge_memcg+0x7c/0x130 [ 822.028103] ? memcg_kmem_put_cache+0xb0/0xb0 [ 822.032609] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 822.037465] memcg_kmem_charge+0x136/0x300 [ 822.041712] __alloc_pages_nodemask+0x3c6/0x760 [ 822.046389] ? __alloc_pages_slowpath+0x2870/0x2870 [ 822.051422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 822.056998] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 822.062032] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 822.067583] alloc_pages_current+0x107/0x210 [ 822.072007] pte_alloc_one+0x1b/0x1a0 [ 822.075819] __pte_alloc+0x2a/0x360 [ 822.079454] __handle_mm_fault+0x3416/0x3f80 [ 822.083877] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 822.088728] ? find_held_lock+0x35/0x130 [ 822.092798] ? handle_mm_fault+0x322/0xb30 [ 822.097137] ? kasan_check_read+0x11/0x20 [ 822.101299] handle_mm_fault+0x43f/0xb30 [ 822.105372] __do_page_fault+0x62a/0xe90 [ 822.109455] ? vmalloc_fault+0x770/0x770 [ 822.113525] ? trace_hardirqs_off_caller+0x65/0x220 [ 822.118547] ? trace_hardirqs_on_caller+0x6a/0x220 [ 822.123480] ? page_fault+0x8/0x30 [ 822.127034] do_page_fault+0x71/0x581 [ 822.130839] ? page_fault+0x8/0x30 [ 822.134384] page_fault+0x1e/0x30 [ 822.137839] RIP: 0033:0x41063f [ 822.141038] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 822.159942] RSP: 002b:00007ffecaf6f9d0 EFLAGS: 00010206 [ 822.165321] RAX: 00007f08a57c7000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 822.172592] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 822.179872] RBP: 00007ffecaf6fab0 R08: ffffffffffffffff R09: 0000000000000000 [ 822.187142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecaf6fb90 [ 822.194411] R13: 00007f08a57e7700 R14: 0000000000000003 R15: 000000000073bfac [ 822.205349] Task in /syz3 killed as a result of limit of /syz3 [ 822.211710] memory: usage 26840kB, limit 0kB, failcnt 259 [ 822.217366] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 822.220053] device hsr_slave_1 entered promiscuous mode [ 822.224518] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 822.235986] Memory cgroup stats for /syz3: cache:6816KB rss:2252KB rss_huge:2048KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8992KB inactive_file:0KB active_file:4KB unevictable:0KB [ 822.257168] Memory cgroup out of memory: Kill process 10493 (syz-executor.3) score 9272000 or sacrifice child [ 822.267404] Killed process 10493 (syz-executor.3) total-vm:72588kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 822.279638] oom_reaper: reaped process 10493 (syz-executor.3), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 822.280400] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 01:23:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x480, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup(r2, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r2, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r6, &(0x7f0000000240), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r10 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r3, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r8, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x100, 0x12) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x25, "4ea67badcbbf79ed0cd59971ef840e52a6629674d5b3b8257a09077237f66dbd43e403673eac0a437835f4865708638396578f20af159003f965d5ec90811cd9b98b1e4aadc02b23be3bc54c76ec83eb087a49c8038a83bb43f3fc6dc9bf76afa7a583ef5753c8695932559fde8485742d10acfdf62d31c20a134e45fc41d6fd"}) 01:23:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:23:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="4adc1f123c023f319bd070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 01:23:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:23:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) [ 822.324159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 822.343182] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 822.406482] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 822.419914] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 822.453605] CPU: 1 PID: 10375 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 822.460577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.469951] Call Trace: [ 822.472571] dump_stack+0x172/0x1f0 [ 822.476261] dump_header+0x15e/0x929 [ 822.480013] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 822.485145] ? ___ratelimit+0x60/0x595 [ 822.489049] ? do_raw_spin_unlock+0x57/0x270 [ 822.493477] oom_kill_process.cold+0x10/0x6f5 [ 822.498009] ? task_will_free_mem+0x139/0x6e0 [ 822.510130] out_of_memory+0x936/0x12d0 [ 822.514139] ? lock_downgrade+0x810/0x810 [ 822.518315] ? oom_killer_disable+0x280/0x280 [ 822.522840] ? find_held_lock+0x35/0x130 [ 822.526961] mem_cgroup_out_of_memory+0x1d2/0x240 [ 822.531847] ? memcg_event_wake+0x230/0x230 [ 822.536193] ? do_raw_spin_unlock+0x57/0x270 [ 822.540627] ? _raw_spin_unlock+0x2d/0x50 [ 822.544799] try_charge+0x1028/0x15b0 [ 822.548624] ? find_held_lock+0x35/0x130 [ 822.552712] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 822.557577] ? kasan_check_read+0x11/0x20 [ 822.561747] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 822.566650] mem_cgroup_try_charge+0x24d/0x5e0 [ 822.571287] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 822.576236] wp_page_copy+0x430/0x16a0 [ 822.580152] ? follow_pfn+0x2a0/0x2a0 [ 822.583980] ? kasan_check_read+0x11/0x20 [ 822.588146] ? do_raw_spin_unlock+0x57/0x270 [ 822.592573] do_wp_page+0x57d/0x10b0 [ 822.596305] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 822.600996] ? kasan_check_write+0x14/0x20 [ 822.605245] ? do_raw_spin_lock+0xc8/0x240 [ 822.609503] __handle_mm_fault+0x230a/0x3f80 [ 822.613988] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 822.618872] ? find_held_lock+0x35/0x130 [ 822.622977] ? handle_mm_fault+0x322/0xb30 [ 822.627334] ? kasan_check_read+0x11/0x20 [ 822.631524] handle_mm_fault+0x43f/0xb30 [ 822.635894] __do_page_fault+0x62a/0xe90 [ 822.641328] ? vmalloc_fault+0x770/0x770 [ 822.645431] ? trace_hardirqs_off_caller+0x65/0x220 [ 822.650492] ? trace_hardirqs_on_caller+0x6a/0x220 [ 822.655454] ? page_fault+0x8/0x30 [ 822.659027] do_page_fault+0x71/0x581 [ 822.662855] ? page_fault+0x8/0x30 [ 822.666422] page_fault+0x1e/0x30 [ 822.669905] RIP: 0033:0x403242 [ 822.673118] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 29 84 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 d9 39 05 00 48 [ 822.692105] RSP: 002b:00007ffecaf6eb70 EFLAGS: 00010246 [ 822.697591] RAX: 0000000000000000 RBX: 00000000000c8a2e RCX: 0000000000412900 01:23:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="4adc1f123c023f319bd070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) [ 822.704985] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffecaf6fca0 [ 822.712373] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000274c940 [ 822.719669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecaf6fca0 [ 822.726952] R13: 00007ffecaf6fc90 R14: 0000000000000000 R15: 00007ffecaf6fca0 [ 822.909356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.970083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 823.009840] Task in /syz3 killed as a result of limit of /syz3 [ 823.016047] memory: usage 24456kB, limit 0kB, failcnt 270 [ 823.031852] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 823.038782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 823.045710] Memory cgroup stats for /syz3: cache:6816KB rss:44KB rss_huge:0KB shmem:6736KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6872KB inactive_file:4KB active_file:0KB unevictable:0KB 01:23:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) [ 823.067912] Memory cgroup out of memory: Kill process 10375 (syz-executor.3) score 8756000 or sacrifice child [ 823.078601] Killed process 10375 (syz-executor.3) total-vm:72324kB, anon-rss:76kB, file-rss:34824kB, shmem-rss:0kB [ 823.083271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 823.090452] oom_reaper: reaped process 10375 (syz-executor.3), now anon-rss:0kB, file-rss:33992kB, shmem-rss:0kB [ 823.136474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.160614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:23:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:23:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) [ 823.184006] atomic_op 000000001b247f9b conn xmit_atomic (null) [ 823.194257] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 823.204915] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.247020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 823.260036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.275673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.306807] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.314305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.339964] atomic_op 00000000da7e7ce3 conn xmit_atomic (null) 01:23:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) [ 823.363133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 823.382624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.393754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.402611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.411548] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.417962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.431317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 823.446892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 01:23:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) [ 823.458985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 823.477673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.492658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 823.531120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.539293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.565598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.593982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 823.608164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.625343] atomic_op 00000000d6ffc4bd conn xmit_atomic (null) [ 823.635806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.662526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 823.678108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.705959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.738947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 823.755883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 823.778323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.816502] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 823.834138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.904244] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 823.976984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.164091] IPVS: ftp: loaded support on port[0] = 21 [ 824.185780] IPVS: ftp: loaded support on port[0] = 21 01:23:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 824.359357] chnl_net:caif_netlink_parms(): no params data found [ 825.157041] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.164003] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.171565] device bridge_slave_0 entered promiscuous mode [ 825.178677] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.185091] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.192098] device bridge_slave_1 entered promiscuous mode [ 825.211706] chnl_net:caif_netlink_parms(): no params data found [ 825.230438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 825.609109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 825.638066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 825.645852] team0: Port device team_slave_0 added [ 826.019905] net_ratelimit: 37 callbacks suppressed [ 826.019914] protocol 88fb is buggy, dev hsr_slave_0 [ 826.030056] protocol 88fb is buggy, dev hsr_slave_1 [ 826.048474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 826.055737] team0: Port device team_slave_1 added [ 826.061038] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.067409] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.075101] device bridge_slave_0 entered promiscuous mode [ 826.082449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 826.089619] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.096567] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.104132] device bridge_slave_1 entered promiscuous mode [ 826.125319] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 826.191560] device hsr_slave_0 entered promiscuous mode [ 826.250038] device hsr_slave_1 entered promiscuous mode [ 826.293098] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 826.349829] protocol 88fb is buggy, dev hsr_slave_0 [ 826.354929] protocol 88fb is buggy, dev hsr_slave_1 [ 826.685731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 826.694492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 826.704132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 826.728891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 826.736717] team0: Port device team_slave_0 added [ 827.059767] protocol 88fb is buggy, dev hsr_slave_0 [ 827.059815] protocol 88fb is buggy, dev hsr_slave_1 [ 827.064870] protocol 88fb is buggy, dev hsr_slave_1 [ 827.075113] protocol 88fb is buggy, dev hsr_slave_0 [ 827.080255] protocol 88fb is buggy, dev hsr_slave_1 [ 827.142405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 827.151954] team0: Port device team_slave_1 added [ 827.157631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 827.166241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 827.539116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 827.601955] device hsr_slave_0 entered promiscuous mode [ 827.640982] device hsr_slave_1 entered promiscuous mode [ 827.859754] protocol 88fb is buggy, dev hsr_slave_0 [ 828.071716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 828.086887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 828.475585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.483038] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 828.855085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 828.865442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 828.872788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 828.880958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.904494] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 828.910691] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.929605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.937044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 828.995112] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 829.001608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.009528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.017339] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.023755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.031158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.040409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 829.049251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.057302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.065158] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.071577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.080947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 829.088386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 829.133184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.145077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.152199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 829.163753] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 829.170285] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.178693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 829.223464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 829.231385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 829.239444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.247552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.255318] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.261726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.304391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 829.311615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.319351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 829.327450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 829.336742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 829.346900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 829.392834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.402900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.410626] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.416981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.426074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 829.434177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 829.442862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 829.492473] device bridge_slave_1 left promiscuous mode [ 829.498103] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.541502] device bridge_slave_0 left promiscuous mode [ 829.547004] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.600980] device bridge_slave_1 left promiscuous mode [ 829.606442] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.650495] device bridge_slave_0 left promiscuous mode [ 829.655946] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.711696] device bridge_slave_1 left promiscuous mode [ 829.717201] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.750924] device bridge_slave_0 left promiscuous mode [ 829.756444] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.801028] device bridge_slave_1 left promiscuous mode [ 829.806491] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.850875] device bridge_slave_0 left promiscuous mode [ 829.856400] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.219766] net_ratelimit: 16 callbacks suppressed [ 831.219775] protocol 88fb is buggy, dev hsr_slave_0 [ 831.229883] protocol 88fb is buggy, dev hsr_slave_1 [ 832.019758] protocol 88fb is buggy, dev hsr_slave_0 [ 832.024876] protocol 88fb is buggy, dev hsr_slave_1 [ 832.589903] protocol 88fb is buggy, dev hsr_slave_0 [ 832.595076] protocol 88fb is buggy, dev hsr_slave_1 [ 833.299786] protocol 88fb is buggy, dev hsr_slave_0 [ 833.304944] protocol 88fb is buggy, dev hsr_slave_1 [ 834.099754] protocol 88fb is buggy, dev hsr_slave_0 [ 834.104863] protocol 88fb is buggy, dev hsr_slave_1 [ 836.739843] net_ratelimit: 6 callbacks suppressed [ 836.739853] protocol 88fb is buggy, dev hsr_slave_0 [ 836.749888] protocol 88fb is buggy, dev hsr_slave_1 [ 837.459778] protocol 88fb is buggy, dev hsr_slave_0 [ 837.464938] protocol 88fb is buggy, dev hsr_slave_1 [ 838.259772] protocol 88fb is buggy, dev hsr_slave_0 [ 838.264953] protocol 88fb is buggy, dev hsr_slave_1 [ 838.819826] protocol 88fb is buggy, dev hsr_slave_0 [ 838.824991] protocol 88fb is buggy, dev hsr_slave_1 [ 839.539838] protocol 88fb is buggy, dev hsr_slave_0 [ 839.546451] protocol 88fb is buggy, dev hsr_slave_1 [ 839.651762] device hsr_slave_1 left promiscuous mode [ 839.692909] device hsr_slave_0 left promiscuous mode [ 839.733178] team0 (unregistering): Port device team_slave_1 removed [ 839.746611] team0 (unregistering): Port device team_slave_0 removed [ 839.757108] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 839.796729] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 839.894405] bond0 (unregistering): Released all slaves [ 839.936316] bond4 (unregistering): Released all slaves [ 839.946922] bond3 (unregistering): Released all slaves [ 839.961091] bond2 (unregistering): Released all slaves [ 839.979124] bond1 (unregistering): Released all slaves [ 840.031556] device hsr_slave_1 left promiscuous mode [ 840.075383] device hsr_slave_0 left promiscuous mode [ 840.117250] team0 (unregistering): Port device team_slave_1 removed [ 840.128317] team0 (unregistering): Port device team_slave_0 removed [ 840.138853] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 840.173268] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 840.267284] bond0 (unregistering): Released all slaves [ 840.373138] device hsr_slave_1 left promiscuous mode [ 840.435249] device hsr_slave_0 left promiscuous mode [ 840.494357] team0 (unregistering): Port device team_slave_1 removed [ 840.506615] team0 (unregistering): Port device team_slave_0 removed [ 840.517221] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 840.566059] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 840.657090] bond0 (unregistering): Released all slaves [ 840.781770] device hsr_slave_1 left promiscuous mode [ 840.843847] device hsr_slave_0 left promiscuous mode [ 840.894544] team0 (unregistering): Port device team_slave_1 removed [ 840.905819] team0 (unregistering): Port device team_slave_0 removed [ 840.917482] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 840.943587] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 841.020628] bond0 (unregistering): Released all slaves [ 841.058095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 841.071149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 841.080363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 841.088341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 841.100525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 841.111149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 841.118843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.129339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 841.136406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 841.146404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 841.154335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.163217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 841.173812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 841.184514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 841.191718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 841.200398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 841.208543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.219851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 841.234434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 841.243488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 841.254942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 841.263238] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 841.273290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 841.280929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 841.297536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 841.306452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 841.314377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.325723] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 841.332192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 841.340968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.364030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 841.377927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.548032] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 841.561079] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 841.584712] CPU: 0 PID: 10547 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 841.591679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.601041] Call Trace: [ 841.603633] dump_stack+0x172/0x1f0 [ 841.607250] dump_header+0x15e/0x929 [ 841.610968] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 841.616087] ? ___ratelimit+0x60/0x595 [ 841.619970] ? do_raw_spin_unlock+0x57/0x270 [ 841.624539] oom_kill_process.cold+0x10/0x6f5 [ 841.629040] ? task_will_free_mem+0x139/0x6e0 [ 841.633544] out_of_memory+0x936/0x12d0 [ 841.637523] ? oom_killer_disable+0x280/0x280 [ 841.642013] mem_cgroup_out_of_memory+0x1d2/0x240 [ 841.646846] ? memcg_event_wake+0x230/0x230 [ 841.651174] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 841.656282] ? cgroup_file_notify+0x140/0x1b0 [ 841.660783] memory_max_write+0x169/0x300 [ 841.664932] ? mem_cgroup_write+0x360/0x360 [ 841.669241] ? lock_acquire+0x1ea/0x3f0 [ 841.673621] cgroup_file_write+0x245/0x7a0 [ 841.677858] ? mem_cgroup_write+0x360/0x360 [ 841.682170] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 841.687093] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 841.692039] kernfs_fop_write+0x2ba/0x480 [ 841.696190] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 841.700951] __vfs_write+0x116/0x820 [ 841.704676] ? retint_kernel+0x2d/0x2d [ 841.708555] ? kernfs_fop_open+0xd90/0xd90 [ 841.712793] ? kernel_read+0x120/0x120 [ 841.716684] ? __lock_is_held+0xb6/0x140 [ 841.720760] ? rcu_read_lock_sched_held+0x110/0x130 [ 841.725780] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 841.730560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 841.736098] ? __sb_start_write+0x1ac/0x360 [ 841.740421] vfs_write+0x20c/0x560 [ 841.743966] ksys_write+0xea/0x1f0 [ 841.747503] ? __ia32_sys_read+0xb0/0xb0 [ 841.751567] ? do_syscall_64+0x26/0x610 [ 841.755545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 841.760906] ? do_syscall_64+0x26/0x610 [ 841.764883] __x64_sys_write+0x73/0xb0 [ 841.768763] do_syscall_64+0x103/0x610 [ 841.772657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 841.777845] RIP: 0033:0x458c29 [ 841.781040] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 841.800129] RSP: 002b:00007f140f2d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.807859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 841.815116] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 841.822371] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 841.829632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f140f2da6d4 [ 841.836917] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff [ 841.856801] net_ratelimit: 16 callbacks suppressed [ 841.856827] protocol 88fb is buggy, dev hsr_slave_0 [ 841.867456] protocol 88fb is buggy, dev hsr_slave_1 [ 841.878606] protocol 88fb is buggy, dev hsr_slave_0 [ 841.884046] protocol 88fb is buggy, dev hsr_slave_1 [ 841.895578] Task in /syz0 killed as a result of limit of /syz0 [ 841.903820] memory: usage 16408kB, limit 0kB, failcnt 309 [ 841.909445] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 841.919939] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 841.926281] Memory cgroup stats for /syz0: cache:52KB rss:2212KB rss_huge:2048KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 841.987351] Memory cgroup out of memory: Kill process 10545 (syz-executor.0) score 9272000 or sacrifice child [ 841.999330] protocol 88fb is buggy, dev hsr_slave_0 [ 842.000206] protocol 88fb is buggy, dev hsr_slave_1 [ 842.013372] Killed process 10545 (syz-executor.0) total-vm:72588kB, anon-rss:2184kB, file-rss:35800kB, shmem-rss:0kB [ 842.030321] oom_reaper: reaped process 10545 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 01:24:17 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) 01:24:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:24:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:24:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:24:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 842.097947] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 842.155689] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 842.189804] CPU: 1 PID: 10526 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 842.196766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.206123] Call Trace: [ 842.208726] dump_stack+0x172/0x1f0 [ 842.212373] dump_header+0x15e/0x929 [ 842.216106] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 842.221225] ? ___ratelimit+0x60/0x595 [ 842.225125] ? do_raw_spin_unlock+0x57/0x270 [ 842.229557] oom_kill_process.cold+0x10/0x6f5 [ 842.234075] ? task_will_free_mem+0x139/0x6e0 [ 842.238590] out_of_memory+0x936/0x12d0 [ 842.242580] ? lock_downgrade+0x810/0x810 [ 842.246794] ? oom_killer_disable+0x280/0x280 [ 842.251302] ? find_held_lock+0x35/0x130 [ 842.255384] mem_cgroup_out_of_memory+0x1d2/0x240 [ 842.260242] ? memcg_event_wake+0x230/0x230 [ 842.264579] ? do_raw_spin_unlock+0x57/0x270 [ 842.269007] ? _raw_spin_unlock+0x2d/0x50 [ 842.273167] try_charge+0x1028/0x15b0 [ 842.276988] ? find_held_lock+0x35/0x130 [ 842.281071] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 842.285932] ? kasan_check_read+0x11/0x20 [ 842.290101] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 842.294970] mem_cgroup_try_charge+0x24d/0x5e0 [ 842.299586] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 842.304536] wp_page_copy+0x430/0x16a0 [ 842.308447] ? follow_pfn+0x2a0/0x2a0 [ 842.312261] ? kasan_check_read+0x11/0x20 [ 842.316423] ? do_raw_spin_unlock+0x57/0x270 [ 842.320843] do_wp_page+0x57d/0x10b0 [ 842.324573] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 842.329252] ? kasan_check_write+0x14/0x20 [ 842.333540] ? do_raw_spin_lock+0xc8/0x240 [ 842.337791] __handle_mm_fault+0x230a/0x3f80 [ 842.342215] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 842.347074] ? find_held_lock+0x35/0x130 [ 842.351149] ? handle_mm_fault+0x322/0xb30 [ 842.355406] ? kasan_check_read+0x11/0x20 [ 842.359568] handle_mm_fault+0x43f/0xb30 [ 842.363648] __do_page_fault+0x62a/0xe90 [ 842.367731] ? vmalloc_fault+0x770/0x770 [ 842.371804] ? trace_hardirqs_off_caller+0x65/0x220 [ 842.376833] ? trace_hardirqs_on_caller+0x6a/0x220 [ 842.381775] ? page_fault+0x8/0x30 [ 842.385331] do_page_fault+0x71/0x581 [ 842.389240] ? page_fault+0x8/0x30 [ 842.392789] page_fault+0x1e/0x30 [ 842.396252] RIP: 0033:0x403242 [ 842.399458] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 29 84 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 d9 39 05 00 48 [ 842.418366] RSP: 002b:00007ffc5533bd30 EFLAGS: 00010246 [ 842.423744] RAX: 0000000000000000 RBX: 00000000000cd71c RCX: 0000000000412900 [ 842.431022] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc5533ce60 [ 842.438297] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001662940 [ 842.445570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5533ce60 01:24:17 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6400000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x978, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'bond_slave_0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x8e8, [@among={'among\x00', 0x820, {{0x100, 0x2}}}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x9f0) 01:24:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) [ 842.452851] R13: 00007ffc5533ce50 R14: 0000000000000000 R15: 00007ffc5533ce60 [ 842.460874] protocol 88fb is buggy, dev hsr_slave_0 [ 842.465958] protocol 88fb is buggy, dev hsr_slave_1 01:24:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 01:24:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) 01:24:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) [ 842.814080] Task in /syz0 killed as a result of limit of /syz0 [ 842.820909] memory: usage 14004kB, limit 0kB, failcnt 322 [ 842.831186] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.863549] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 842.878272] Memory cgroup stats for /syz0: cache:52KB rss:44KB rss_huge:0KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB 01:24:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) 01:24:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) [ 842.979816] protocol 88fb is buggy, dev hsr_slave_0 [ 842.984985] protocol 88fb is buggy, dev hsr_slave_1 [ 843.014964] Memory cgroup out of memory: Kill process 10526 (syz-executor.0) score 8756000 or sacrifice child [ 843.057284] Killed process 10526 (syz-executor.0) total-vm:72324kB, anon-rss:76kB, file-rss:34824kB, shmem-rss:0kB 01:24:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x4, 0x4, 0xdb, 0x0, 0xffffffffffffffff, 0x0, [0x115]}, 0x3c) [ 843.120426] oom_reaper: reaped process 10526 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 843.568252] IPVS: ftp: loaded support on port[0] = 21 [ 843.647866] chnl_net:caif_netlink_parms(): no params data found [ 843.685361] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.692011] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.699407] device bridge_slave_0 entered promiscuous mode [ 843.706457] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.713790] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.721180] device bridge_slave_1 entered promiscuous mode [ 843.739469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 843.749001] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 843.765064] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 843.772731] team0: Port device team_slave_0 added [ 843.778274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 843.785872] team0: Port device team_slave_1 added [ 843.791399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 843.798755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 843.853026] device hsr_slave_0 entered promiscuous mode [ 843.890223] device hsr_slave_1 entered promiscuous mode [ 843.940416] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 843.947853] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 843.961905] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.968261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.974962] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.981350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.019527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.027915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 844.038247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 844.046420] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.053855] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.063950] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 844.070325] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.080207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 844.087830] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.094234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.107928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 844.115847] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.122262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.142192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 844.151201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 844.158733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 844.170610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 844.181605] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 844.187703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 844.195358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 844.204249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.220342] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 844.232244] 8021q: adding VLAN 0 to HW filter on device batadv0 01:24:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) 01:24:19 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:24:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) 01:24:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x6) dup3(r2, r1, 0x0) 01:24:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 01:24:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec={0xa, 0x0, 0x0, 0x8dffffff}, 0x80, 0x0}, 0x0) [ 844.418394] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:24:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) 01:24:19 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x51, 0x0, 0x0, [{}, {}]}) 01:24:19 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:24:19 executing program 1: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\xf9\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\x9e8\x06\x8f\x84^\xb8\xfc\x93\xdc5~\xb2\x8a\xb36\x13\xee\x82\xc1\f\xe2\xb5\xf9\xa0\x87\x88:*\x87\x14s\x92\\\xb5\x9e\x19>\xf3N\rL.\xb2G`\xe2y\x92\x11\x01\n/\x8fc\xe8f\x9b\xd9H\xfdR\xe4f\x8b\xf6\xffl;u\xb5:\x01g\xb8\xd9\xa5~>\x06f\xff\xfc\xf4\x84\xd0E\xc3\xca\x14\xf6%9fN\a\xa0\x93]\x12:\xc2\xb2\x0e\xc6\xad\xcb\vI\xbe\x1cKyv\xb9\xb6\xef\x03\xe3\xcc\b\x89NQ\x19\xc0\xa7\x05`\xef\x1aN\xbeT\xa2\aB\xc6\x02\xff\xff\xee\xc6;E\x19\x9c1}z\xda(\x93\x1b\xd5\x01\'B\x8d\xd5t\xf2\xa20\xdd\x1c\x1f\x00\xaaYn2\xa8\xb3\xbc\x86|M\x99\xad\xd4P&-fn\b\x0e\xfe\x05\xb6\xec\xaa`\xdb\x8b^\xbc^%\x9c6\x0f\xb2\xc7\xb5]\x94a\x1b\xbeP\x00\x1c3|\x8fB\xf4o\xd3\xec\xf2?\x8f\x00\xbc\xd8\\\xb0\t\xfa4\t\x8e[\xafb\t\xaa*\x19\xa4\xbb\x7f', 0x2761, 0x0) chdir(0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xfffffced) rt_sigpending(0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000780)=""/214) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x280000, @mcast2, 0x7}, {0xa, 0x4e23, 0x4, @mcast2, 0x1}, 0x3, [0x0, 0xfffffffffffffffc, 0x85ed, 0x3, 0x64, 0x9c, 0x0, 0x4d]}, 0x5c) 01:24:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) [ 844.801242] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:24:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x51, 0x0, 0x0, [{}, {}]}) 01:24:20 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:24:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) [ 845.073532] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:24:20 executing program 4: clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0xf) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x0, 0x0) 01:24:20 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:24:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x51, 0x0, 0x0, [{}, {}]}) [ 845.403656] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 845.786955] IPVS: ftp: loaded support on port[0] = 21 [ 845.944208] chnl_net:caif_netlink_parms(): no params data found [ 846.007686] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.022323] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.034949] device bridge_slave_0 entered promiscuous mode [ 846.044963] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.056765] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.066256] device bridge_slave_1 entered promiscuous mode [ 846.106317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 846.123363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 846.157088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 846.166964] team0: Port device team_slave_0 added [ 846.177840] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 846.188275] team0: Port device team_slave_1 added [ 846.198803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 846.209062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 846.295720] device hsr_slave_0 entered promiscuous mode [ 846.340322] device hsr_slave_1 entered promiscuous mode [ 846.410528] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 846.417606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 846.436107] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.442510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.449104] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.455615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.488724] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 846.496148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.505304] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 846.514767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 846.522599] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.540304] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.549011] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 846.561288] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 846.567392] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.576381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 846.584518] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.590935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.598289] WARNING: CPU: 1 PID: 25998 at net/ipv6/xfrm6_tunnel.c:351 xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.603201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 846.607835] Kernel panic - not syncing: panic_on_warn set ... [ 846.607835] [ 846.615938] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.622468] CPU: 1 PID: 25998 Comm: kworker/u4:0 Not tainted 4.19.34 #2 [ 846.622477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.622498] Workqueue: netns cleanup_net [ 846.622513] Call Trace: [ 846.628880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.635585] dump_stack+0x172/0x1f0 [ 846.635606] panic+0x263/0x51d [ 846.635621] ? __warn_printk+0xf3/0xf3 [ 846.635640] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.661592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 846.661737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.665719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 846.668801] ? __warn.cold+0x5/0x54 [ 846.680649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 846.681092] ? __warn+0xe8/0x1d0 [ 846.686732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.693804] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.693820] __warn.cold+0x20/0x54 [ 846.693835] ? kasan_check_read+0x11/0x20 [ 846.693849] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.693865] report_bug+0x263/0x2b0 [ 846.698538] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 846.707191] do_error_trap+0x204/0x360 [ 846.707207] ? math_error+0x340/0x340 [ 846.711393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.720240] ? __flush_work+0x48c/0x840 [ 846.720261] ? error_entry+0x76/0xd0 [ 846.726166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.728553] ? trace_hardirqs_off_caller+0x65/0x220 [ 846.733423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.737439] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 846.747963] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 846.750901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 846.750922] do_invalid_op+0x1b/0x20 [ 846.750937] invalid_op+0x14/0x20 [ 846.750956] RIP: 0010:xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.816338] Code: 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 0f 85 73 01 00 00 4d 8b 34 24 31 ff 4c 89 f6 e8 7b b8 61 fb 4d 85 f6 74 b3 e8 d1 b6 61 fb <0f> 0b eb aa 48 81 c3 00 08 00 00 45 31 e4 49 be 00 00 00 00 00 fc [ 846.835243] RSP: 0018:ffff888062f77be0 EFLAGS: 00010293 [ 846.840594] RAX: ffff8880a64e6080 RBX: ffff8880a76dd0c0 RCX: ffffffff86098065 [ 846.847849] RDX: 0000000000000000 RSI: ffffffff8609806f RDI: 0000000000000007 [ 846.855102] RBP: ffff888062f77c08 R08: ffff8880a64e6080 R09: ffff8880a64e6970 [ 846.862355] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a76dd178 [ 846.869796] R13: 0000000000000017 R14: ffff8880a92c5800 R15: dffffc0000000000 [ 846.877066] ? xfrm6_tunnel_net_exit+0x1d5/0x370 [ 846.881989] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 846.886735] ? xfrm6_tunnel_alloc_spi+0x920/0x920 [ 846.891565] ops_exit_list.isra.0+0xb0/0x160 [ 846.895964] cleanup_net+0x3fb/0x960 [ 846.899680] ? unregister_pernet_device+0x80/0x80 [ 846.904532] ? __lock_is_held+0xb6/0x140 [ 846.908604] process_one_work+0x98e/0x1760 [ 846.912837] ? pwq_dec_nr_in_flight+0x320/0x320 [ 846.917503] ? lock_acquire+0x16f/0x3f0 [ 846.921491] ? kasan_check_write+0x14/0x20 [ 846.925711] ? do_raw_spin_lock+0xc8/0x240 [ 846.929945] worker_thread+0x98/0xe40 [ 846.933734] ? trace_hardirqs_on+0x67/0x230 [ 846.938058] kthread+0x357/0x430 [ 846.941409] ? process_one_work+0x1760/0x1760 [ 846.945888] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 846.951337] ret_from_fork+0x3a/0x50 [ 846.956184] Kernel Offset: disabled [ 846.960082] Rebooting in 86400 seconds..