[ 32.115147] kauditd_printk_skb: 8 callbacks suppressed [ 32.115154] audit: type=1800 audit(1582524856.240:33): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.142432] audit: type=1800 audit(1582524856.240:34): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.476583] random: sshd: uninitialized urandom read (32 bytes read) [ 36.752508] audit: type=1400 audit(1582524860.880:35): avc: denied { map } for pid=7233 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.871407] random: sshd: uninitialized urandom read (32 bytes read) [ 37.637319] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. [ 43.196010] random: sshd: uninitialized urandom read (32 bytes read) 2020/02/24 06:14:27 fuzzer started [ 43.417372] audit: type=1400 audit(1582524867.540:36): avc: denied { map } for pid=7242 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.277582] random: cc1: uninitialized urandom read (8 bytes read) 2020/02/24 06:14:29 dialing manager at 10.128.0.105:36725 2020/02/24 06:14:29 syscalls: 2937 2020/02/24 06:14:29 code coverage: enabled 2020/02/24 06:14:29 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/02/24 06:14:29 extra coverage: extra coverage is not supported by the kernel 2020/02/24 06:14:29 setuid sandbox: enabled 2020/02/24 06:14:29 namespace sandbox: enabled 2020/02/24 06:14:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/24 06:14:29 fault injection: enabled 2020/02/24 06:14:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/24 06:14:29 net packet injection: enabled 2020/02/24 06:14:29 net device setup: enabled 2020/02/24 06:14:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/24 06:14:29 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 46.487936] random: crng init done 06:16:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x28080, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x14245c1df010e5d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xf7b541139324bdf7) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000240)) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000280)=0x7fffffff, 0x4) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x1, 0x3, 0x4, 0x1, 0x1, {0x77359400}, {0x3, 0x0, 0x5, 0x4, 0x1, 0x8a, "28f1c7df"}, 0x100, 0x3, @planes=&(0x7f00000002c0)={0x4, 0x5, @userptr=0xc4, 0x4ca}, 0x1, 0x0, r0}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000380)='\x00') r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000440)={{0x77359400}, {r4, r5+30000000}}, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x6, 0x2, 0x1000}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r6, @in={{0x2, 0x4e23, @remote}}, 0x1ff, 0xde}, &(0x7f0000000600)=0x90) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000640)={0x21, @local, 0x4e22, 0x1, 'lblc\x00', 0x32, 0x80000000, 0x3f}, 0x2c) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-monitor\x00', 0x264201, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000800}, 0x40000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f00000008c0)=0x84) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vsock\x00', 0xa0000, 0x0) r10 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000b00)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000900)='/dev/loop0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='fuseblk\x00', 0x2000, &(0x7f0000000d40)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r11}}, {@context={'context', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@fowner_lt={'fowner<', r12}}, {@fowner_lt={'fowner<', r13}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vboxnet1]'}}, {@dont_measure='dont_measure'}]}}) r15 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/status\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r15, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x18, 0x1404, 0x805, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x4004000) r16 = add_key$user(&(0x7f0000001000)='user\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)="4ea0a603c98c2526978761abf9137b5349d60c10abeea09508b3417a112694ac6ff130f62d1cbb153edb9b8d216b2a9bd80856bab45aa38f3a4128b90d5c7ebd81fc1c1a629ba1bc1b7babbe0f6949e6c4001ff06793af34ce53e8e53bdaa7dadeee826b7840f8fe2ec482d9755acd28c8a2827302027da42e4fb2cb8b1ad020d3d141b863421b30a256c7180263cca6cbe6f9e1e4f467ece2988718bd5ed96837d136a1a5b0faba6f50a8e2c84deee00738a0714dfad04465ad09f700835f9297d4f85b2c68e383eb89e1d9a7fcd1359fc62db7b9790928b38143909c01feab2adb43306e006e2578", 0xe9, 0xfffffffffffffffe) keyctl$chown(0x4, r16, 0x0, r14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x140f, 0x800, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x24008845) r17 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x40, 0x0) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r17, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r18, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x2}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 06:16:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x7fffffff}, 0xc) r2 = getpid() ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x105000) fcntl$setown(r3, 0x8, r2) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000180)=""/181, &(0x7f0000000240)=0xb5) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x8, @any, 0x0, 0x2}, 0xe) socket$alg(0x26, 0x5, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x150) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f0000000300)="52691babd17bc096d466888d490661abf9d856ef4a94a8f90da8392e6dee57118e0e948d32401763c0f46972cb5f592c5bacdf360a32d994e96b28d7e63061c49d6c25c345b323504f7be47acd9a9467266eaad5c9fe16c158f2ef63dacaa8c6662e4d77f451de653ab58e6dcf8f47d223995830549d", &(0x7f0000000380)=""/63, &(0x7f00000003c0)="5b05e5f9d19795332b1e073ba8ead08de20045bd9d588c3265183cfe5b593ff6ec228e1df7f535a9b633cf144f233e3151bab760c1bc093b8fe19bc758e0d20167fde7e17bb570f94051a0a0e4c5d4f312a6a5d58bd73d6fde660cfe3f541459e71b63b38e15fff651e33670beff88658e73ad7f231b98001eab1aa465fa2f8ae19d4580108dabaea7487b8f65efa83d7fc504e66c0dc7b59998c334cfc11d70df935f0ea65d2877df863be32baac3195683b19299aae4013fa9cc3f26c81b99d51baad47cda07cbb59c", &(0x7f00000004c0)='V', 0x3f, r5, 0x4}, 0x38) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000580)={0x3}, 0x4) socketpair(0x28, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) fcntl$setflags(r6, 0x2, 0x0) creat(&(0x7f0000000600)='./file0\x00', 0x101) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x840) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000780)=0x2, 0x4) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) r9 = gettid() mq_notify(r8, &(0x7f0000000800)={0x0, 0x33, 0x1, @tid=r9}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/crypto\x00', 0x0, 0x0) write$P9_RSETATTR(r10, &(0x7f0000000880)={0x7, 0x1b, 0x1}, 0x7) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000008c0)={[], 0x8001, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x4000}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14) bind$can_raw(r0, &(0x7f00000011c0)={0x1d, r11}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001200)=0x1, 0x4) 06:16:55 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x200, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000000300)={0x1508, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x4}, 0x60, 0x3f, 0x42, 0x1ff, 0x8, 'syz1\x00', "d74d986f6c8e386354b7e3d4a651faaf4581c4d21a19a5efbba57996ff220042", "a44953acc58fb2f00a82b47b1f46ac07341e6b8b456f01e1167db377d4cbb263", [{0x3, 0x144, {0x0, 0x10000}}, {0x8000, 0x2, {0x3, 0xcd1}}, {0x2, 0x6, {0x0, 0x1f}}, {0x1, 0xffff, {0x4720cbf400a63534, 0xfffff03c}}, {0xf2, 0xffff, {0x0, 0x8}}, {0x7ff, 0x8, {0x0, 0x401}}, {0x0, 0xfffa, {0x0, 0x80000000}}, {0xfff, 0x7fff, {0x1, 0xff}}, {0xe1, 0x7, {0x2, 0x8}}, {0x7, 0x3, {0x0, 0x1}}, {0x9c, 0x0, {0x1, 0x100}}, {0x2, 0x7fff, {0x2}}, {0x250f, 0xe62, {0x0, 0x800}}, {0xfffc, 0xfffb, {0x3, 0x40000}}, {0xfe01, 0x3f, {0x1, 0x8}}, {0x6, 0x7c4, {0x1, 0x8}}, {0x623, 0x7, {0x3, 0x7f}}, {0x1, 0xc721, {0x3}}, {0x10b, 0x20, {0x1, 0x4}}, {0x8000, 0x800, {0x3, 0x401}}, {0x3ff, 0x2, {0x3, 0x944}}, {0x6, 0x1, {0x1, 0x85}}, {0x2, 0x5, {0x1, 0xe26}}, {0x5, 0x0, {0x2, 0x8}}, {0xffff, 0x0, {0x2, 0xb6}}, {0x8001, 0x4000, {0x3, 0x8}}, {0x3, 0x6, {0x0, 0x9}}, {0x0, 0x100, {0x2, 0x2}}, {0x71ea, 0x2, {0x3, 0x10001}}, {0x9, 0x6, {0x1, 0x7}}, {0x1, 0x6, {0x0, 0x58}}, {0x200, 0x5, {0x2, 0x195ba84d}}, {0x1000, 0x2, {0x1, 0xfff}}, {0x2, 0x1b1a, {0x3, 0x4}}, {0x7, 0x0, {0x0, 0x6}}, {0x2, 0x1, {0x0, 0x3fea91ef}}, {0x6, 0x8000, {0x1, 0x100}}, {0x7, 0x1000, {0x2, 0x7}}, {0x0, 0x9, {0x0, 0x7fff}}, {0x1f, 0x1, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x2, 0x6, 0xff, 0x0, 0x4, 'syz1\x00', "a14fd4baca66f6ee3ac870c1a0c91819c10a6fb75636bb5219061a2f0402de7f", "b7ec5ae0798473fb0415bb911ed3693227732bc7b143f09ff77cfbd4c3753fd0", [{0x1, 0x8001, {0x2, 0xa93b}}, {0x7, 0xafcb, {0x0, 0xce}}, {0x3ff, 0x81, {0x0, 0x5}}, {0x80, 0x20, {0x1, 0x7}}, {0x4, 0x0, {0xec5a75c72875736c, 0x80000001}}, {0x3, 0x0, {0x1, 0x4}}, {0x7, 0x1, {0x3, 0x9}}, {0x400, 0x81, {0x1, 0x3}}, {0x1000, 0x8000, {0x2, 0x5}}, {0x1f, 0x8001, {0x3, 0x4}}, {0xa38, 0xd9, {0x3, 0x1f}}, {0x722, 0x6861, {0x0, 0x401}}, {0x1f, 0x1, {0x3, 0x4}}, {0x3f, 0x3, {0x3, 0x80000000}}, {0x2, 0xab, {0x0, 0x7}}, {0x5, 0xad, {0x2, 0x5}}, {0x5845, 0x6, {0x2, 0x8000}}, {0xbb0a, 0xffff, {0x1}}, {0x0, 0xd998, {0x2, 0x9}}, {0x5, 0x5, {0x1, 0x2}}, {0x4, 0x0, {0x2, 0x20}}, {0x1, 0x3, {0x2, 0x400}}, {0x401, 0x1, {0xd81fae4ff1e729f7, 0x5fd}}, {0x5, 0x5cad, {0x0, 0x1}}, {0x1000, 0xfe01, {0x1, 0x7}}, {0xe366, 0x6, {0x2, 0x81}}, {0x1800, 0x0, {0x0, 0x6c1}}, {0x1, 0xf91, {0x3, 0x101}}, {0x3c6, 0x3ff, {0x3, 0x1000}}, {0x20, 0x1, {0x3, 0x5}}, {0xfff, 0x3ff, {0x2, 0x3ff}}, {0x3f, 0x1ff, {0x2, 0x1ff}}, {0x62d7, 0x8, {0x2, 0x7fff}}, {0x50ca, 0x2, {0x0, 0x5}}, {0x100, 0x9, {0x3, 0x9}}, {0x0, 0x7, {0x0, 0x1800000}}, {0xfff9, 0x3, {0x2, 0x9}}, {0x6, 0x0, {0x2}}, {0xea, 0x1, {0x2, 0x5}}, {0x9, 0x1, {0x3, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffeff}, 0x8, 0x1d, 0xffc1, 0x3e, 0xd, 'syz0\x00', "1f60652255d82ba9e84c5eed74740670393aa990c925eb8464fd5d0a0583f4d1", "93b9b945a05cfd09bd0c63feb79a480cc284b98cf8500f34922002f78a3f6e3f", [{0x3f, 0x2, {0x1, 0x3e00}}, {0x6, 0x4, {0x3, 0xcbcb}}, {0x1, 0x5, {0x3, 0xffff}}, {0x8, 0x80, {0x1}}, {0x6, 0x469, {0x3, 0x3}}, {0x40, 0x96, {0x0, 0x20}}, {0x4, 0x4, {0x3, 0x9}}, {0x2, 0x4, {0x2, 0x401}}, {0xc94, 0x100, {0x0, 0x8001}}, {0x2, 0x80, {0x2, 0x10001}}, {0x101, 0x4, {0x0, 0x2}}, {0x8, 0x0, {0x0, 0x8}}, {0x4, 0x0, {0x3, 0x2}}, {0x9, 0x4, {0x1, 0x80000001}}, {0xb021, 0x9, {0x3, 0x3}}, {0x2, 0x5, {0x2, 0x6}}, {0x7000, 0x0, {0x1}}, {0x1, 0x40, {0x2, 0xda16}}, {0x8, 0xb9, {0x0, 0xa18}}, {0x1, 0x8, {0x2, 0x6}}, {0x6, 0x1000, {0x3, 0x7}}, {0x80, 0x9, {0x1, 0x101}}, {0x80, 0x7fff, {0x0, 0x10001}}, {0x1, 0xfffd, {0x2, 0x5}}, {0xd37f, 0x6}, {0x150, 0x2, {0x1, 0x654}}, {0x1, 0x7ff, {0x0, 0xce}}, {0x9e34, 0x81, {0x0, 0xc0}}, {0x76, 0xffff, {0x1, 0x83}}, {0x5, 0x200, {0x0, 0x10000}}, {0x9, 0x9, {0x3, 0x6}}, {0x0, 0x9, {0x2, 0xfffffffc}}, {0x2, 0x3f, {0x2, 0x5}}, {0x3e, 0x0, {0x3, 0x5}}, {0x7, 0x2, {0x1}}, {0x6, 0x3, {0x2, 0x8}}, {0xe2, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x4f5f8b8d846d84e8, 0x1}}, {0xa2d3, 0x6, {0x0, 0x1f}}, {0xff4d, 0xff, {0x2, 0xcc}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0xc0, 0x18, 0x1, 0x400, 0x28, 'syz1\x00', "602e1b832fe311bddb510a10bd6f2df85749054a076e5b9f40d3541edf70fbc7", "41b2bef994cf0874efc24d9a7beb05cd89905f770aae34d54dcd8fe6ef770593", [{0xfff, 0x0, {0x1, 0x1f}}, {0x7f, 0x80, {0x3, 0x9}}, {0x9, 0x0, {0x0, 0x200}}, {0x8, 0x1, {0x1, 0x18000}}, {0x1ff, 0x7, {0x1, 0x7fffffff}}, {0x3f, 0x8, {0x0, 0x2}}, {0x5, 0xfe00, {0x0, 0xffff}}, {0x7, 0x934, {0x0, 0xffffffd6}}, {0x100, 0x7f, {0x3, 0x8000}}, {0x7f, 0x20, {0x0, 0x200}}, {0x7fff, 0xb870, {0x3, 0x6}}, {0x7, 0x9, {0x0, 0x40}}, {0x9, 0xbd1, {0x2, 0x7f}}, {0x1, 0x6, {0x1, 0x7}}, {0x1, 0xe59, {0x3, 0xffffffc0}}, {0x39, 0xfff, {0x1, 0x7}}, {0x8, 0x200, {0x3, 0x3f}}, {0x6, 0x1, {0x1, 0x2}}, {0xfff7, 0x0, {0x0, 0xa53}}, {0x66, 0x8000, {0x1, 0x9ac}}, {0xfffc, 0x2, {0x0, 0xb78}}, {0x6, 0x7f, {0x2, 0x296}}, {0x7, 0xc57, {0x4b5be974003ddbc4, 0x4}}, {0xc5a, 0x5, {0x1, 0xfffff800}}, {0x3ff, 0x9, {0x0, 0x80000001}}, {0x2, 0x6, {0x2, 0x7}}, {0x81, 0x7, {0x2, 0x1}}, {0x1, 0x7, {0x0, 0x1}}, {0x3f, 0xfff7, {0x1, 0x80000001}}, {0x8, 0x1, {0x2, 0x8}}, {0x5145, 0x6, {0x1, 0x2}}, {0x1, 0x1ff, {0x0, 0x3cd}}, {0x0, 0x821f, {0x0, 0x3}}, {0x7f, 0x4, {0x1, 0x101}}, {0x6d6, 0x4, {0x0, 0x4}}, {0x3, 0x9, {0x0, 0x9}}, {0x6, 0x3, {0x2, 0x8}}, {0x6, 0x5a14, {0x1, 0x5}}, {0x5, 0x9, {0x2, 0x7}}, {0x43b0, 0x3, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x800}, 0x23, 0x81, 0x8, 0x1ff, 0x10, 'syz1\x00', "12de18212f4446f92697471aa8600b0d1c8137cfebc7bc632c0ede5d343cc5b8", "f7185b4709b8e7112398943dea9e581d402da95cc7f2178d611cf37e0c3cb684", [{0x1, 0x7, {0x3, 0x9}}, {0x7, 0x0, {0x3, 0xfffffff7}}, {0x35e8, 0x3, {0x3, 0x3}}, {0x1, 0xbab5, {0x0, 0x4}}, {0x7, 0xff, {0x3, 0xffffffff}}, {0x1000, 0x1000, {0x2, 0x3}}, {0x8, 0x400, {0x2, 0xfffffff8}}, {0x6, 0xfdd3, {0x3, 0x2}}, {0xfff, 0x0, {0x1, 0x3}}, {0x5, 0xff, {0x3, 0x5}}, {0x3f, 0xfff, {0x0, 0x2}}, {0x3, 0x8000, {0x1, 0x7}}, {0x40, 0x8001, {0x3, 0x2}}, {0x4, 0x1, {0x3, 0x8}}, {0x5, 0xb9b6, {0x2, 0x100}}, {0x100, 0x2, {0x1, 0x7}}, {0x5, 0x9, {0x3, 0x6}}, {0x72, 0x7, {0x2, 0x80000000}}, {0x51, 0xc1, {0x1, 0x4b}}, {0x9, 0x5, {0x1, 0x3}}, {0x3, 0xcb, {0x2, 0x3}}, {0x4, 0x7, {0x1, 0x7}}, {0x0, 0x1ff, {0x2, 0x9}}, {0x9c5, 0x401, {0x3, 0x8}}, {0x9c3b, 0x1f, {0x0, 0x2040}}, {0x1, 0xc61, {0x0, 0x6}}, {0xf6, 0x100, {0x2, 0x10000}}, {0x8001, 0x5, {0x1, 0x8}}, {0x3ff, 0x1f, {0x2, 0x7}}, {0x2, 0xff, {0x0, 0x5}}, {0x2b8, 0x36, {0x0, 0x5}}, {0x2, 0x101, {0x2, 0x10001}}, {0x3, 0x4, {0x2, 0x8001}}, {0x4, 0xf3a6, {0x2, 0x14dc}}, {0x800, 0x8, {0x1, 0x7}}, {0x30, 0x0, {0x1, 0xfffffff9}}, {0x6, 0x5, {0x1, 0x10001}}, {0x2, 0x8, {0x2, 0x200}}, {0x3f, 0x473, {0x3, 0xcd3}}, {0x8000, 0x7, {0x3, 0x7f8}}]}}}, {{0x254, 0x1, {{0x2, 0x7eb}, 0xf7, 0x8, 0x2, 0x9, 0x6, 'syz0\x00', "51fb449a6e7175218c6a73dbc774d4a8ab749defd12653026e984b94a8a7cdbe", "9099e3f0d0ec9a6a01da07ba810881151530eb46d9680ca5a515617c0dcf3592", [{0x9, 0x4, {0x1, 0x8e43}}, {0x3ff, 0x0, {0x2, 0xec8}}, {0x1f, 0xfffa, {0x3, 0x80000001}}, {0x97, 0xbf, {0x1, 0x5}}, {0xfb3, 0x9, {0x1, 0x6}}, {0xffc1, 0x7, {0x1, 0x2000000}}, {0x81, 0xe9a4, {0x3, 0xffff}}, {0x3, 0x1}, {0x9, 0x9, {0x3, 0x3}}, {0x9, 0xff, {0x1, 0xb1d}}, {0x330, 0x78, {0x2, 0xa02}}, {0x5, 0x5, {0x1, 0x2}}, {0xfff, 0x1, {0x2, 0x7}}, {0x6, 0xfff8, {0x0, 0x4d}}, {0xd44, 0x4, {0x1, 0x3067}}, {0xec73, 0x7f, {0x1}}, {0xa37, 0x200, {0x3, 0x3f}}, {0x0, 0x2, {0x3, 0x7}}, {0x180, 0x4, {0x1, 0x1000}}, {0x5, 0x6, {0x0, 0x200}}, {0xa7, 0x2, {0x1, 0x9}}, {0xfff8, 0x9, {0x2, 0x4}}, {0x2000, 0x7ff, {0x0, 0xb2}}, {0x2, 0xc000, {0x1}}, {0x8, 0x3ff, {0x3, 0x400}}, {0x7, 0x0, {0x1, 0xfffffc00}}, {0x3f, 0x6, {0x3, 0x4}}, {0x1, 0x9, {0x3, 0x4}}, {0x61, 0xf39, {0x1, 0x3}}, {0x8, 0x6, {0x0, 0x7}}, {0x8, 0x800, {0x3, 0x101}}, {0x6, 0x24, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x1f}}, {0x2, 0x400, {0x2}}, {0x0, 0xfff, {0x2, 0x5}}, {0x4, 0x1, {0x0, 0x6dcc57dd}}, {0x4, 0x4, {0x3, 0x5}}, {0x8, 0x400, {0x65605b807f124819, 0x7}}, {0x6, 0x8, {0x3, 0x9}}, {0xb37, 0x3, {0x3, 0x7acb}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x0, 0x6, 0x3, 0x7fff, 0xe, 'syz1\x00', "3127ab068c4521a59e2856c93bc53ed4d4ca66b01b0d46777db1362890759643", "fafdff2f2d7cbf1a1ea2639aa5ed18fe8883bd65f8b532978eb73007b686481d", [{0x8000, 0x9d43, {0x3, 0x1ff}}, {0x99, 0xffe1, {0x2, 0x8}}, {0xffff, 0x2f, {0x3, 0x9}}, {0x7, 0x2, {0x1, 0x8}}, {0x3ff, 0x3, {0x3, 0x95d600}}, {0x1, 0x5, {0x0, 0x8}}, {0xfff8, 0x3f, {0x3, 0x3}}, {0x1, 0x7fff, {0x3, 0x5}}, {0x4, 0x2e3e, {0x0, 0x1f}}, {0x9, 0xc, {0x0, 0xc000000}}, {0x1, 0x0, {0x3}}, {0x1, 0x1, {0x2, 0x101}}, {0x2, 0x4, {0x0, 0x1000}}, {0xe6e, 0x9, {0x0, 0x7}}, {0x9, 0x636, {0x3, 0x1}}, {0x800, 0x8001, {0x3, 0x1}}, {0x5, 0x101, {0x0, 0xffffff10}}, {0x1000, 0x1, {0x0, 0xffffffff}}, {0x0, 0x4, {0x1, 0xffff}}, {0x1, 0x8, {0x3, 0xfffffffe}}, {0x37, 0xb6f, {0x3, 0x4}}, {0xfb90, 0x9, {0x1, 0x9}}, {0x1, 0x5, {0x1, 0x6}}, {0x4, 0x3, {0x2, 0x3}}, {0x1, 0xf8f1, {0x3, 0x1}}, {0x1, 0xcf, {0x2, 0xd248}}, {0x8, 0xf95e}, {0x40, 0x9, {0x2, 0xe50}}, {0x81, 0x401, {0x2, 0x6}}, {0x4, 0x1ff, {0x1, 0xa012}}, {0x0, 0x6, {0x1, 0x7}}, {0x1, 0x3, {0x1, 0x996}}, {0x8, 0x400, {0x0, 0x6}}, {0x8001, 0x6, {0x2, 0xa40d}}, {0x0, 0x8000, {0x0, 0x5}}, {0x7ff, 0x7ff, {0x1, 0x3ff}}, {0x7, 0x5, {0x0, 0xfccd}}, {0xec, 0x0, {0x3, 0x4}}, {0x7ff, 0x8, {0x0, 0x8000}}, {0x5, 0x7fff, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x4, 0x9, 0x0, 0x7, 0x23, 'syz1\x00', "4e0db8af11f3aebf142b90135038c512c7378dd1e50b0d67056cf91c6b05a723", "fded755b8478ae2e119341d5aaf3bc55b1b2edc7fbd8a78b65454752807b97ab", [{0x7ff, 0x7f, {0x0, 0x3}}, {0x7ff, 0xfff, {0x1, 0x3}}, {0x3ff, 0x9, {0x2, 0x1}}, {0x1, 0x224, {0x3, 0x1}}, {0x200, 0x8000, {0x2, 0x2}}, {0x0, 0x8, {0x0, 0x8}}, {0x20, 0x8001, {0x2}}, {0x0, 0x6, {0x1, 0x1}}, {0x3, 0x2c0d, {0x3, 0x4}}, {0x7, 0x7ff, {0x2, 0x8}}, {0x100, 0x40, {0x1, 0x2}}, {0x7, 0x5, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x401, 0xea5, {0x2, 0x5}}, {0x8, 0xf801, {0x1}}, {0x9, 0x6, {0x3, 0x6}}, {0x401, 0x4, {0x1, 0x800}}, {0x56, 0xfff8, {0x3, 0x7fffffff}}, {0x80f, 0xd9, {0x3, 0x7fffffff}}, {0xd012, 0x2, {0x2, 0x2}}, {0x1, 0x6, {0x0, 0x20}}, {0x3196, 0x0, {0x3, 0xc2}}, {0x8, 0x6, {0x0, 0x8000}}, {0x7ff, 0x8c, {0x6, 0x62a}}, {0x9, 0x0, {0x1, 0x2}}, {0xc14, 0x1, {0x3, 0x9}}, {0xc61, 0xd5d6, {0x2, 0xd10}}, {0x3f, 0x8, {0x1, 0xfff}}, {0x3, 0xf8c2, {0x0, 0x80e}}, {0x0, 0x100, {0x0, 0x1000}}, {0xa33, 0x1000, {0x2}}, {0x2, 0x7, {0x0, 0x7ff}}, {0xfff7, 0x2, {0x3, 0x40}}, {0x6, 0xb991, {0x3, 0x3}}, {0x0, 0x8001, {0x1, 0x3edd0000}}, {0x204, 0x9, {0x3, 0xcff6}}, {0x1, 0x0, {0x2, 0x2}}, {0x1000, 0x5, {0x0, 0x6}}, {0x1e, 0x6, {0x3, 0x200}}, {0x2, 0x0, {0x3, 0xfff}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x6, 0x8, 0x3, 0x8, 0x1d, 'syz1\x00', "8ad956f8c154ce0ae8db8568ce6840f90d7eedf61bf1b4f3a853b971047f1d7c", "91370f42a987b4d47c231ea603afba61733e794ccabd332de41651bd1ba616f3", [{0x4, 0xb5be, {0x3, 0x80000000}}, {0x0, 0x101, {0x3, 0x8}}, {0x4, 0x1d3, {0x0, 0x2}}, {0xd505, 0x2, {0x2, 0xc61}}, {0x2, 0x4, {0x2, 0x3ac104a9}}, {0x9, 0x533, {0x2, 0x1}}, {0x0, 0x7ff, {0x3, 0x5b52}}, {0x6, 0x7f, {0x2, 0x7}}, {0xad03, 0x3, {0x0, 0x8}}, {0x9, 0xff01, {0x2, 0x6}}, {0x40, 0x8000, {0x2, 0x6}}, {0xed, 0x1, {0x2, 0x2}}, {0x5, 0x7, {0x3, 0xff16}}, {0x6154, 0x5, {0x2, 0x2}}, {0x3, 0x1, {0x2, 0x4}}, {0x200, 0x5, {0x2, 0x400}}, {0x0, 0x0, {0x2, 0x8}}, {0x3, 0x4, {0x0, 0x100}}, {0x7, 0x1, {0x1, 0x9b}}, {0x20, 0x4, {0x2, 0x7fff}}, {0x17, 0x2, {0x2, 0xffffffff}}, {0x6, 0xd050, {0x0, 0x8e}}, {0x0, 0xf12c, {0x1, 0x2}}, {0xc09a, 0x2e6e, {0x0, 0x8000}}, {0x7, 0x68, {0x0, 0xfffff800}}, {0x59, 0x5, {0x1, 0x506}}, {0x100, 0x6, {0x3, 0x400}}, {0x6, 0x477e, {0x1, 0x21c4}}, {0x7ff, 0x4, {0x0, 0x1}}, {0x3, 0x1, {0x3, 0x8000}}, {0x7f, 0x4, {0x3, 0x10001}}, {0x4, 0x1000, {0x0, 0x8}}, {0x800, 0x3f}, {0x81, 0x2, {0x1, 0x8}}, {0x7d, 0x800, {0x2, 0x400}}, {0xffff, 0x7f, {0x1, 0x6}}, {0x3000, 0x7, {0x0, 0x1000}}, {0x8, 0xfff, {0x0, 0x7}}, {0x800, 0xe67, {0x3, 0x7}}, {0xffff, 0x53, {0x3, 0x80000001}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x810}, 0x40000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001900)={0x3, 0x3, 0x4, 0x40000000, 0x3ff, {}, {0x5, 0x8, 0x1, 0x0, 0x4e, 0x6, "13c62db8"}, 0x80, 0x3, @planes=&(0x7f00000018c0)={0x8, 0x200, @userptr=0x5, 0xfff}, 0x8, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4400}, 0x800) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x891) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000001b80)={&(0x7f0000ffd000/0x2000)=nil, 0x3, 0x0, 0xc6, &(0x7f0000ffb000/0x4000)=nil, 0x4}) connect$x25(0xffffffffffffffff, &(0x7f0000001bc0)={0x9, @remote={[], 0x3}}, 0x12) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x1010, r1, 0x61fe000) r3 = accept4(0xffffffffffffffff, &(0x7f0000001c00)=@ax25={{0x3, @default}, [@netrom, @bcast, @null, @bcast, @netrom, @null, @bcast, @bcast]}, &(0x7f0000001c80)=0x80, 0x40400) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xc8, 0x0, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xbb06d2dd}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/ocfs2_control\x00', 0x4102, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001ec0)={[0x6, 0x3, 0x5, 0x8, 0x0, 0x20b7, 0xa32f, 0xfffffffffffffff7, 0x40, 0x20, 0x4, 0x3, 0x400, 0x8000, 0x20, 0x3f], 0x4000, 0x40000}) r5 = dup2(0xffffffffffffffff, r3) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) fchmod(r7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002180)=0x0) r9 = perf_event_open(&(0x7f0000002200)={0x3, 0x70, 0x1f, 0x9, 0x7, 0x40, 0x0, 0x3f, 0x1, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa83e, 0x0, @perf_bp={&(0x7f00000021c0), 0x8}, 0x801, 0x5, 0x4, 0x5, 0x3, 0x80000000, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000002100)={0x5, 0x70, 0x81, 0x5, 0x2, 0x0, 0x0, 0x0, 0x20108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f00000020c0), 0xa}, 0x40011, 0x5, 0x20, 0x2, 0xaa, 0x889e57c, 0x5}, r8, 0x1, r9, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000022c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x30, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000023c0), &(0x7f0000002400)=0x14) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002440)={0x4, 0x4, 0x8, 0x1772, 0x0, [0x80000001, 0xaa9, 0x0, 0xfffffff9], [0x8, 0x1, 0x1f, 0x60000000], [0x2, 0x2, 0x3], [0xfff, 0x7, 0x7, 0x3]}) ioctl$FIBMAP(r3, 0x1, &(0x7f00000024c0)=0x2) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002540)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x40, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040840}, 0x1) r12 = accept4$rose(0xffffffffffffffff, &(0x7f0000002640)=@short={0xb, @dev, @bcast, 0x1, @rose}, &(0x7f0000002680)=0x1c, 0x80000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000026c0)=0x0) fcntl$lock(r12, 0x7, &(0x7f0000002700)={0x0, 0x0, 0x1, 0x0, r13}) 06:16:55 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x8) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) r3 = accept$inet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, [0x4, 0x80000001, 0x200, 0x7, 0x6, 0x100000000, 0x1, 0xfffffffffffffff7, 0x5, 0x9c8, 0x80, 0xffffffff, 0x7f, 0x3, 0x10001]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e20, 0x10001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x35}}, 0x42}}, 0x2, 0x77, 0x3, 0x2, 0x80000001}, &(0x7f0000000380)=0x98) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x3ff, 0x8, &(0x7f0000000780)=[{&(0x7f0000000440)="dec24a30e06e89693c8f49eba3127a5209c8dc6f63b63f1491cb19ecd891dc7a661281910c69c073a88c699c0f3625400574018f5deac080c3ef9fc557a27a3eceb26180945131c7427bd0f0a10211b6c5f124e5dff685e1d15fda2c84c94cacf13047e8abf8b26aee33c7", 0x6b, 0x1}, {&(0x7f00000004c0)="53a9ee5b9e28b2ce877e02cf604021881f60dca818cf7465ebd11c197d5dcbbb6d2eeb71906eedfa72ee7b995332201fea8237ee0cc243bf5e9b04fa8e93", 0x3e, 0x200}, {&(0x7f0000000500)="0e4662e510873abc977aca0f33965641eb180497e2cbef651369", 0x1a, 0x3}, {&(0x7f0000000540)="37b0da1e9432eee1be630759d1cb6260cf3ee1a80db1f5c176d8f3cb31d8c156a437cf664ebfd81bb822ed04ed3ae74bb3e7cc610482e786daf902f8dd3c5f25291b3f06063502a6609249a53ca952079f03cde300", 0x55, 0x9}, {&(0x7f00000005c0)="51259267baedf5be0482bd4cbf6bd5003fe3b4b7005d7a7444e44d395b3ee14f41338bb07b9cf1203fba9ba09e617b65bb38ea77e8281f817813b6cca0cbb19c716d4beea32c4cda6d37cd084180838ff3c1e293f6ef55b6ae4891622352ffb950213dbbb250aa1538bb1750e2d72a55eb6da838929417439a2767a86246777c0773e46b402b9862036515f19c3d994d8a0764cf39276b37c6b3ee5d837faf20e0ea7e044c", 0xa5, 0x8000}, {&(0x7f0000000680)="5953f9239c60c6829d58994b3888af6cb1c0e78602875b7bc504c1af978f50a0fa2fd75bdb2ec285e8ff5983cc92d393eb665c98a38acb8d0feb0b827d13f92791efe97602a85ec6114e730c30a68a26eada2412f81aff11d77a2561e27ff803414819be56984b24fd8e2327c29c158ba54de5c95bfac2b6c859378e15", 0x7d, 0x40}, {&(0x7f0000000700)="c2f5eefbe91b2afe57de750d31d525c308c5a28693faa5c336613f5928db095a25c96c524e6fc72af30100467f9386", 0x2f, 0x1}, {&(0x7f0000000740)="b3551a42352111dfbec3076f065ca1f64767b8fbb4c59a2d02df400973e10f13a015b165af", 0x25, 0x9}], 0x1000000, &(0x7f0000000840)={[{@mode={'mode', 0x3d, 0x9}}, {@check_relaxed='check=relaxed'}], [{@smackfshat={'smackfshat', 0x3d, 'userppp0(!!'}}, {@measure='measure'}]}) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000008c0)={'NETMAP\x00'}, &(0x7f0000000900)=0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000980)=0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x3e9, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x1, 0x2, r6, 0x7fffffff, 0x4, 0x7fffffff}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000a80)='./file0\x00', 0x200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='fd\x00') r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b40)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) open(&(0x7f0000000cc0)='./file0\x00', 0x2000, 0x70) syz_open_dev$mouse(&(0x7f0000000d00)='/dev/input/mouse#\x00', 0x6, 0x105040) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'netpci0\x00', @ifru_mtu=0x6}) r10 = syz_open_dev$mouse(&(0x7f0000000d80)='/dev/input/mouse#\x00', 0x6, 0x340) ioctl$VIDIOC_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000dc0)={0x0, @bt={0x672, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3ff, 0xffff76eb, 0x1, 0x8, 0x4, 0x8, 0x3, 0x6, 0x18, {0x100, 0x4}, 0x3f, 0x1d}}) ptrace$getregs(0xc, r0, 0xfffffffffffffffc, &(0x7f0000000e80)=""/133) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/load\x00', 0x2, 0x0) write(r11, &(0x7f0000000f80)="09c75cb5de2efdb47a004f9bfb0ccfc5c1f085c71fd269b5eacf8e9ff298218fe36ff998270502e21be712310c7be4ee3442895c5e16d61e7c53b4028b9b0f", 0x3f) r12 = openat(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0xa00, 0x119) sendmsg$nl_route_sched(r12, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@deltaction={0x14, 0x31, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20008052) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000001100)={0x0, 0x0, [], @bt={0x889f, 0x10000, 0x81, 0x75, 0x8001, 0x9, 0x10, 0x7}}) 06:16:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8a440, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000001500)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc1500410}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x74, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x32}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x1a}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40081}, 0x20008040) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/policy\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0}, &(0x7f0000001780)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x200}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000001880)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001940)) pipe(&(0x7f0000001980)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x140}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000001b40)=0x6, &(0x7f0000001b80)=0x4) rt_sigaction(0x17, &(0x7f0000001c40)={&(0x7f0000001bc0)="45dbeaf321f70f138f65566666c4c24997d53666f244a7f2e021660f3821d1460f8ac932777746dc2477c463294aa04aeaacf00d", 0x6, &(0x7f0000001c00)="c402052e69fcc421fc538b03000000c4a2e5beb03d4e9ccb41d8d344d0b5fcffffffc0b42c008000000a8f093894ddc4017e12d0c44282f52600d9", {[0x80000000]}}, 0x0, 0x8, &(0x7f0000001c80)) r9 = semget$private(0x0, 0x1, 0x42f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0}, &(0x7f0000001d00)=0xc) r11 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x100, 0x4, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000001e80)={{0x2, r10, 0x0, r11, r12, 0x84, 0x4}, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffa}) newfstatat(0xffffffffffffff9c, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ubi_ctrl\x00', 0x14401, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xb4, 0x3ed, 0x400, 0x70bd25, 0x25dfdbfe, "859c0bf406a3a7481d9c57336cbdf22339d42c7040acdcc9728b76cfc9e8981a1e29d4653a80ef68d3acc64e8b698b9d65f8e464f545d707132d96b3106afebf4bac056db6b9a1647499fc7fc302c3c524faebb71b6e291d1eb3631d68ee1204e03424a4fc6d97a658ebd99850ac5673332e58a7bb426637df0697211f1f8f7aab1de446b5774d7a6ee43f74648658da0211ca5d791c3c595c6e5065dae78c55cc6f", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000021c0)={0x1, &(0x7f0000002180)=[{0x2, 0x80, 0x1f, 0x296a}]}) r13 = accept4(0xffffffffffffffff, &(0x7f0000002200)=@nl=@unspec, &(0x7f0000002280)=0x80, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f00000022c0)={0x2, 'erspan0\x00', {}, 0xfff7}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x8c, r14, 0x40a, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xffc0}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x417}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x55, 0xac, "dad1339a4737abc944bed60de28837df5e185f03c8b38b6f28df8bdc176823c5071bd994c957ceafb6bc358e4c5e124a011d42474e7a0bd01f775a1e912b49dc8ab98013b9008818363de19ea2bc5d2dfe"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000024c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$X25_QBITINCL(r15, 0x106, 0x1, &(0x7f0000002500), 0x4) 06:16:55 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) fcntl$getflags(r0, 0x408) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x7fff, 0x2}, 0x10) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='\xcf#nodev\x00', &(0x7f0000000180)='/dev/vcs\x00', &(0x7f00000001c0)='/selinux/avc/cache_stats\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='user\xd8lo)\'cpuset][em1[em0!%#/ppp1\x00'], 0x1000) lookup_dcookie(0xffff, &(0x7f00000002c0)=""/213, 0xd5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000003c0)=0x6, 0x8) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x82, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000480)='md5sumvboxnet1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r2, r3, 0x0, 0x21, &(0x7f0000000440)='user\xd8lo)\'cpuset][em1[em0!%#/ppp1\x00', r4}, 0x30) r5 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x90, 0x507403) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r5, 0x82000000) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/relabel\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)="068fb028d67545486acf95302a461c9f2c41", 0x12) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0x74, "d1044b0952a5bf3017f04c339a76d5eff7f1aaa7a1ae47dfd70cc539b04fe47592c277f484a02f55e36a04d317dfe6ac6adc8a187d4d4e9bd21a21daeee64fc357423682daa2c69195de86bf3844a84bc50ed37fd9f3229ae774fb1a83184755f7a15eb9279e290a649407cfa9f619a7336c8c20"}, &(0x7f0000000680)=0x7c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000006c0)={r7, @in6={{0xa, 0x4e21, 0x5, @remote, 0x7fffffff}}}, 0x84) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vcs\x00', 0x80001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000880)={{0x44, 0x7}, {0x1, 0x3f}, 0x7, 0x2, 0x47}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000980)={0xc10, 0x6, 0x4, 0x10, 0x80, {0x77359400}, {0x3, 0x2, 0x0, 0xa3, 0x40, 0x8, "b887b2cb"}, 0x7ff, 0x3, @planes=&(0x7f0000000940)={0x60, 0x1ce, @mem_offset=0x2, 0x10000000}, 0x4, 0x0, 0xffffffffffffffff}) connect$nfc_raw(r10, &(0x7f0000000a00)={0x27, 0x0, 0x2, 0x5}, 0x10) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$KVM_GET_XCRS(r11, 0x8188aea6, &(0x7f0000000a80)={0x2, 0x9, [{0x5, 0x0, 0x80000001}, {0x80000000, 0x0, 0x5}]}) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvram\x00', 0x600, 0x0) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000b40)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000c40)={@mcast1, 0x0}, &(0x7f0000000c80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={0x0, @dev, @loopback}, &(0x7f0000000fc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003440)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000003540)=0xe8) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003980)={&(0x7f0000003580)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003600)=""/254, 0xfe}, {&(0x7f0000003700)=""/167, 0xa7}, {&(0x7f00000037c0)=""/21, 0x15}, {&(0x7f0000003800)=""/51, 0x33}], 0x4, &(0x7f0000003880)=""/239, 0xef}, 0x40000060) sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000003cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c80)={&(0x7f00000039c0)={0x298, r13, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x6, 0x3ff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6e}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x298}}, 0x1810) [ 191.073941] audit: type=1400 audit(1582525015.200:37): avc: denied { map } for pid=7242 comm="syz-fuzzer" path="/root/syzkaller-shm509227258" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 191.138286] audit: type=1400 audit(1582525015.220:38): avc: denied { map } for pid=7259 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15789 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 191.490921] IPVS: ftp: loaded support on port[0] = 21 [ 192.289109] IPVS: ftp: loaded support on port[0] = 21 [ 192.334762] chnl_net:caif_netlink_parms(): no params data found [ 192.403064] chnl_net:caif_netlink_parms(): no params data found [ 192.412387] IPVS: ftp: loaded support on port[0] = 21 [ 192.442892] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.449453] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.457001] device bridge_slave_0 entered promiscuous mode [ 192.464319] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.472905] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.479888] device bridge_slave_1 entered promiscuous mode [ 192.500187] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.510668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.550863] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.558005] team0: Port device team_slave_0 added [ 192.565988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.573242] team0: Port device team_slave_1 added [ 192.578254] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.584991] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.592086] device bridge_slave_0 entered promiscuous mode [ 192.600387] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.606744] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.613772] device bridge_slave_1 entered promiscuous mode [ 192.627004] IPVS: ftp: loaded support on port[0] = 21 [ 192.646445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.652850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.678127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.691934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.698181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.723500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.735367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.744780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.753016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.761108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.842054] device hsr_slave_0 entered promiscuous mode [ 192.880322] device hsr_slave_1 entered promiscuous mode [ 192.960773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.968780] team0: Port device team_slave_0 added [ 192.982727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.989831] team0: Port device team_slave_1 added [ 193.001559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 193.029159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 193.041673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.047943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.074163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.092606] chnl_net:caif_netlink_parms(): no params data found [ 193.101375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.107617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.134046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.146220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.157994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 193.223085] device hsr_slave_0 entered promiscuous mode [ 193.250326] device hsr_slave_1 entered promiscuous mode [ 193.292407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 193.311560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 193.326930] IPVS: ftp: loaded support on port[0] = 21 [ 193.414712] audit: type=1400 audit(1582525017.540:39): avc: denied { create } for pid=7265 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.439076] audit: type=1400 audit(1582525017.540:40): avc: denied { write } for pid=7265 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.453500] chnl_net:caif_netlink_parms(): no params data found [ 193.469393] audit: type=1400 audit(1582525017.550:41): avc: denied { read } for pid=7265 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.498100] IPVS: ftp: loaded support on port[0] = 21 [ 193.519491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.526128] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.532759] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.539579] device bridge_slave_0 entered promiscuous mode [ 193.548430] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.554923] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.561914] device bridge_slave_1 entered promiscuous mode [ 193.626270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.671553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.725901] chnl_net:caif_netlink_parms(): no params data found [ 193.734535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.741812] team0: Port device team_slave_0 added [ 193.799049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.806796] team0: Port device team_slave_1 added [ 193.840954] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.862909] chnl_net:caif_netlink_parms(): no params data found [ 193.871990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.878233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.904182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.919617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.926006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.951528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.962911] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.969278] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.976933] device bridge_slave_0 entered promiscuous mode [ 193.986908] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.994143] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.001518] device bridge_slave_1 entered promiscuous mode [ 194.007850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.039582] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.051842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.071651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.079446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.089542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.098349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.119462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.128352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.182191] device hsr_slave_0 entered promiscuous mode [ 194.210485] device hsr_slave_1 entered promiscuous mode [ 194.257864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.276015] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.285010] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.294530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.307162] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.315250] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.322527] device bridge_slave_0 entered promiscuous mode [ 194.328870] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.336421] team0: Port device team_slave_0 added [ 194.341788] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.349191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.356384] team0: Port device team_slave_1 added [ 194.362947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.370903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.378447] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.384946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.393697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.403114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.411928] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.418272] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.425235] device bridge_slave_1 entered promiscuous mode [ 194.449443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.457333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.465272] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.471632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.480647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.499528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.513055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.522682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.532036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.538318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.564748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.576067] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.586517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.616659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.623136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.648674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.659033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.669126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.676739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.686025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.699657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.710906] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.717257] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.726583] device bridge_slave_0 entered promiscuous mode [ 194.733223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.745738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.768463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.775448] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.781927] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.788821] device bridge_slave_1 entered promiscuous mode [ 194.795351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.802953] team0: Port device team_slave_0 added [ 194.843456] device hsr_slave_0 entered promiscuous mode [ 194.880358] device hsr_slave_1 entered promiscuous mode [ 194.921024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.927375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.937138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.944754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.957955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.970195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.977408] team0: Port device team_slave_1 added [ 194.984144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.999126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.006742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.027695] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.045335] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.058902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.067781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.078386] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.084668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.094605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.114499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.121607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.128528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.136206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.144122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.150514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.175813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.186886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.193319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.219033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.253508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 195.259604] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.270854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.282401] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.289494] team0: Port device team_slave_0 added [ 195.297979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.308698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.322627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.330641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.338169] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.344542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.351648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.358771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.366006] team0: Port device team_slave_1 added [ 195.399628] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.407523] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 195.414823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 195.422810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.429050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.454883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.512484] device hsr_slave_0 entered promiscuous mode [ 195.560351] device hsr_slave_1 entered promiscuous mode [ 195.607447] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.614331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.622550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.630527] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.636951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.644338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.651399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.659253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.665829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.691247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.707721] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.715242] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.726270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.733467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.741378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.764939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.787567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.805904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.853725] device hsr_slave_0 entered promiscuous mode [ 195.900355] device hsr_slave_1 entered promiscuous mode [ 195.960270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.968157] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.978044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.996070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.028061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.039927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.051094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 196.067199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.075295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.083109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.090814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.098248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.105954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.113981] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.130586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 196.144529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.153922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.171924] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 196.177939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.223384] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 196.258622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.270838] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.279091] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 196.293945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.301887] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 196.310537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.317000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.325659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.333773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.341103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.355772] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 196.367479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.375195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.383111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.393740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.404303] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.419350] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.426723] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.437792] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 196.449092] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 196.456559] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 196.464921] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.475707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.493703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.501556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.509473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.516857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.525266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.533045] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.539369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.548968] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.548974] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.551845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.554413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.557021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 196.559415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 196.567816] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 196.623163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.632185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.639865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.647825] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.654211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.661999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.669652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.677328] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.683675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.691094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.698729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.706513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.714028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.723231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.730741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.737572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.746146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.755412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.763064] device veth0_vlan entered promiscuous mode [ 196.776270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.786152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.793943] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.800320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.807197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.814995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.826732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 196.835735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.847210] device veth1_vlan entered promiscuous mode [ 196.858961] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 196.867629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.875240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.882337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.889922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.897759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.909206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.917961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 196.928884] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 196.940408] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 196.948331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.960772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.966949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.975195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.982872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.990831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.998581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.007591] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 197.024439] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 197.036591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.045084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.051963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.059632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.067795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.075411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.085558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.094350] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.102565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.109577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.118262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.126001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.133503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.145243] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 197.154792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.163582] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 197.169655] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.183025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.193129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.201847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.209489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.218527] device veth0_macvtap entered promiscuous mode [ 197.224995] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 197.233915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 197.242485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.251717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.260389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 197.266478] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.274872] device veth1_macvtap entered promiscuous mode [ 197.281724] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 197.288113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.295860] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.302962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.310492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.317783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.325565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.333190] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.339667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.346757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.354778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.364454] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.370659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.380673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.390951] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 197.397949] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 197.405702] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 197.413431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.421516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.429188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.437390] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.443798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.453616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 197.463234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.472825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 197.481956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.489424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.497578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.506722] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.513501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.527214] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 197.536850] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 197.545196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.553557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.561695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.569007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.576905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.586268] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.592730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.606341] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 197.615401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 197.626742] audit: type=1400 audit(1582525021.750:42): avc: denied { map } for pid=7360 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 197.640435] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 197.663741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.675448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.682831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.689822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.697394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.704550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.711691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.719439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.727364] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.733747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.741653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.750521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.760284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.768948] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 197.776919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.787086] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 197.796735] device veth0_vlan entered promiscuous mode [ 197.804772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.815359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.821759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.829452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.837537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.845453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.853357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.860491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.867168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.875048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.884235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.899939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.907742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.916431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.925701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.935612] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 197.942753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.953730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.961799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.970159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.977772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.986456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.994838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.015929] device veth1_vlan entered promiscuous mode [ 198.023817] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 198.035077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.046011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.059958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.067843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.076756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.093821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.101558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.109413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.118671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.131198] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 198.144639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.152928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.161700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.169916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.176902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.190755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.203340] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 198.209706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.235456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.248680] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 198.285169] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.296175] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 198.308700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.317785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.325825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.337533] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 198.349144] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 198.360912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.368539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.386930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.395628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.403586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.411306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.421368] device veth0_macvtap entered promiscuous mode [ 198.427469] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 198.436310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.459839] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.475570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.486910] device veth1_macvtap entered promiscuous mode [ 198.493702] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 198.500827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.508033] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.523649] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 198.544450] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 198.556562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 198.569292] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 198.576749] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 198.584394] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 198.595047] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 198.603616] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.617325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.627821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.636047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.643377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.654716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 198.665055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.680764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.691281] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 198.698226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.709257] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 198.719335] device veth0_vlan entered promiscuous mode [ 198.728794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.736529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.744466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.752805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.760560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.768027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.775867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.785018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.798587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:17:03 executing program 5: syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e25, 0x3, @ipv4={[], [], @local}}, 0x1c) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, [], [{0x7, 0x80000001, 0x3ff, 0x9fd0, 0x2, 0x3ff}, {0x5, 0x7, 0x57, 0x6, 0x9, 0x100}], [[], [], [], [], [], [], [], [], []]}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) [ 198.814846] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 198.830794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.848804] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 198.860960] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 198.867709] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 198.886320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.896403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.909081] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 198.920669] device veth1_vlan entered promiscuous mode [ 198.926427] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 198.943111] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 198.951516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.959322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r5, r4, 0x0, 0x3d) [ 198.968249] hrtimer: interrupt took 27494 ns [ 198.977330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.987524] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 199.009253] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 199.025397] device veth0_vlan entered promiscuous mode [ 199.038056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.047536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.061427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.068310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.076369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.093313] device veth1_vlan entered promiscuous mode [ 199.099088] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 199.109860] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 199.131694] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 199.155968] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 199.171509] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r5, r4, 0x0, 0x3d) [ 199.188263] device veth0_macvtap entered promiscuous mode [ 199.213580] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 199.228726] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 199.236750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.246930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.254561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.262247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.269802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.277621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.286144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.295116] device veth1_macvtap entered promiscuous mode [ 199.301354] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 199.311376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 199.320866] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 199.327993] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r5, r4, 0x0, 0x3d) [ 199.346160] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 199.369013] device veth0_macvtap entered promiscuous mode [ 199.376589] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 199.389047] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r5, r4, 0x0, 0x3d) [ 199.402120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 199.413512] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 199.422653] device veth1_macvtap entered promiscuous mode [ 199.428716] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 199.446315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.454581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.468235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.475657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.483255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.492758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.499647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.515872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 199.526089] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 199.537817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.550606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.560722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.570629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.581369] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 199.588463] batman_adv: batadv0: Interface activated: batadv_slave_0 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x3d) [ 199.598994] device veth0_vlan entered promiscuous mode [ 199.606045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.626241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.634358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.642669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.652878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 199.661759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.679726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.689576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.699526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.709755] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 199.717239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.728004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.738585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.748565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.758622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.767833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.777655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.787614] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 199.794789] batman_adv: batadv0: Interface activated: batadv_slave_0 06:17:03 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x3d) [ 199.811256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.842923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.859185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.867560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.887823] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 199.896310] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 199.903643] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 199.914089] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 199.925836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.936403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.949676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.959817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.969376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.979181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.989140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 199.997720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.006241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.016096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.029539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.037764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.046540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.054475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.063342] device veth0_vlan entered promiscuous mode [ 200.075961] device veth1_vlan entered promiscuous mode [ 200.095283] device veth1_vlan entered promiscuous mode [ 200.107802] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 200.132182] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 200.141837] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 200.167344] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 200.175865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 06:17:04 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5ab8}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 200.183740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.193104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.201553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.215460] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 200.238154] device veth0_macvtap entered promiscuous mode [ 200.245044] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 200.254567] device veth1_macvtap entered promiscuous mode [ 200.266334] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 200.273994] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 200.286239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.293755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.305341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.313417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.336289] device veth0_macvtap entered promiscuous mode [ 200.342984] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 200.353114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 200.368777] device veth1_macvtap entered promiscuous mode [ 200.375259] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 200.385546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 200.405608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 200.415077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.428567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.438257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.448438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.457843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.467596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.477112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.487012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.497152] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 200.504362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.516688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.524490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.531845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.539820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.554894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 200.566368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.577151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.586553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.596764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.606061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.615810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.625232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.635833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.645882] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 200.653051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.660830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.668507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.682867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.693316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.702595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.713458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.723242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.733366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.743000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.752945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.762067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.771870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.782196] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 200.789162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.799057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.813419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.826785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.836866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.846383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.857049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.866263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.876510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.885900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.895713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.904868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.914735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.924743] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 200.931885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.943516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.952315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.743791] SELinux: policydb magic number 0xb55cc709 does not match expected magic number 0xf97cff8c [ 201.755492] SELinux: failed to load policy [ 202.266871] QAT: Invalid ioctl [ 202.311574] QAT: Invalid ioctl 06:17:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000061307adde49d34e2051b99141172498a17ab88e982cb3d10ac1dd4d7a8f6f45cd83af11b28a623935dbda950bc679b459f1c755c35098f5010e182006523b606cbeee11ac933eaeb37c171434f14d45d5d7e068f916f51b16deb0f0737b7ce49bca930f92acc75b57789295d43df15f54cca63a278ad600bab737bcfe5e48aaebefb984c53d87e0fd9a255d7dc96ba2c0288270c438e63bed9f1921a9a786d162731", @ANYRES16=0x0, @ANYBLOB="010000000000000000c85696a5278b44ae0062620000"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace$getregs(0xc, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=""/252) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10, 0x0, 0xa}, 0x10) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x7fffff, 0x40000000011, r4, 0x0) pipe(0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x9, 0x200000) connect(0xffffffffffffffff, &(0x7f0000000440)=@phonet={0x23, 0x0, 0x81, 0x3}, 0x80) r6 = socket$unix(0x1, 0x5, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000580)) fcntl$setstatus(r5, 0x4, 0x6100) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 06:17:06 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0xfffffffffffffffe) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="5f0000000500000085c97f5630681df183b96bd033b123a07ff3d64452f1e30d3d1c5f5041f33094920a66ea9757611dcef30d58456b8ee186e124c648df02c4f5483c1c1c86fd4d21ea249f5a2c13d9f08c14540500e007ef2f9f3f32c84f8b77"], 0x80) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x800, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(r4, 0x0, r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c0}, 0x880) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000300000000fedbdf250165e965692be3bfe466edff6f5d4cdc00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r11, r10, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff0d) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x86}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4040065) r13 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r14, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r14, 0xae80, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYPTR], 0x2) 06:17:06 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x3d) 06:17:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast1, @in6=@remote}, {@in, 0x1000000, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x121000) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) 06:17:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x190, 0x0, 0x0, 0x0, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@unspec=@mark={{0x30, 'mark\x00'}, {0x81, 0x400}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 06:17:06 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3d) [ 202.498267] Cannot find add_set index 0 as target [ 202.532048] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 06:17:06 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f77652e695e726469723d2e3a4a696c2f61640b8b7d8839bff29465306552dd98c429"]) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x2800) 06:17:06 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3d) 06:17:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010000507c68ab14e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000008000300030000001c00058002000400ffffffffffff000008000400aaaaaaaaaabb00000a0005000400000000000000"], 0x6c}}, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x838, [0x6, 0x5], 0x854e}, 0x10) [ 202.844679] overlayfs: unrecognized mount option "lowe.i^rdir=.:Jil/ad ‹}ˆ9¿ò”e0eRݘÄ)" or missing value 06:17:07 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fanotify_mark(r1, 0xe1, 0x1020, r3, &(0x7f0000000000)='./bus\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3d) 06:17:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xa921, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000400)={0x0, &(0x7f00000002c0)="9bdd846463c726334d980b17b8b8d7e4acc2140750e2791de4b6253494a527a931d7b3eb359f2cf3a382f181d1fb53a47465c89bae5243f5297e8b3dc5c6d7d39f8dc71158801b3f9693c97a14047247e0a3ed305a03d5ed339c0d4f30f5a89b1e108070ea47defab973777493568c4a588bfcb15580961fad7a0b7fac6e7ca063c52a6b78ffc673973df38a015d031c560169db3d3bb4d48618262bdcf3ffd39d591a6a61ce2aeab7af1121d3b7edcb61", 0xb1}) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000ffffb802bc8369c"], 0x9) sendfile(r6, r5, 0x0, 0xa198) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) dup(r8) r9 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r9, 0x200004) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000004, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r10, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x15}) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x70000, 0x8, {0x77359400}, {0x1, 0x2, 0x6, 0x4, 0x20, 0xda, "607689ac"}, 0x2, 0x2, @offset=0x3, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_FREQUENCY(r11, 0xc02c5638, &(0x7f0000000000)={0x3f, 0x3, 0x3b}) ppoll(&(0x7f0000000240)=[{r4, 0x4}], 0x1, &(0x7f0000000080), 0x0, 0x0) 06:17:07 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0x5000, 0x0, 0x1b, 0x6, 0xff}) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8000000) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r6 = fcntl$dupfd(r2, 0x0, r0) r7 = epoll_create1(0x0) r8 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x40000000}) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000240)="e8adab4b9aefd42657a083a1c852d7c5c10b0ad861bd6ba06837f420e19a58ad599c97debc94f83c", 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000140)=""/156) 06:17:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x410000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000080)={0x3e, 0x0, &(0x7f0000000100)="26d08a1fcf681c18929dcf0736d294e1bcf1dae2ac509c4bfa38587f3ecd7dd9259e84fea8cf28ea45d330ae6932d214f9615f5274ee0f5bf041f8ecea9c503a2f4d93bd8ddcc27ae0ce6a5936f6c513fa1d7574fd850b4e4c20c4fd7cdf8dc303a042e7d06b836ecc2151089c9ae2d3085ba73f91b302eec5dbc6ccff6dce1b706bf04c7552c311316d781de14c9784fcdd10b10288f911643750c5f13794eb22dae3ccc09242f4ac822646a70af84a2ecfbd134bd327edf68e41faa0eda0f517ec438d57edb9a93dfb950bae92eadfe016f686754fca965cd827", {0xffffff34, 0x3b783def, 0x41416770, 0x3, 0xfffffffd, 0x0, 0x4, 0x1ff}}) 06:17:07 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r5, r4, 0x0, 0x3d) 06:17:07 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r4, r3, 0x0, 0x3d) 06:17:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x410000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000080)={0x3e, 0x0, &(0x7f0000000100)="26d08a1fcf681c18929dcf0736d294e1bcf1dae2ac509c4bfa38587f3ecd7dd9259e84fea8cf28ea45d330ae6932d214f9615f5274ee0f5bf041f8ecea9c503a2f4d93bd8ddcc27ae0ce6a5936f6c513fa1d7574fd850b4e4c20c4fd7cdf8dc303a042e7d06b836ecc2151089c9ae2d3085ba73f91b302eec5dbc6ccff6dce1b706bf04c7552c311316d781de14c9784fcdd10b10288f911643750c5f13794eb22dae3ccc09242f4ac822646a70af84a2ecfbd134bd327edf68e41faa0eda0f517ec438d57edb9a93dfb950bae92eadfe016f686754fca965cd827", {0xffffff34, 0x3b783def, 0x41416770, 0x3, 0xfffffffd, 0x0, 0x4, 0x1ff}}) [ 203.337497] print_req_error: I/O error, dev loop9, sector 2 [ 203.343754] hfsplus: unable to find HFS+ superblock 06:17:07 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$unix(0x1, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:07 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xe0ed, &(0x7f00000000c0)=0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000680)='/dev/cachefiles\x00', 0x2, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r11, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x0) r12 = eventfd2(0x1, 0x0) io_submit(r1, 0x8, &(0x7f0000001cc0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x1ff, r2, &(0x7f0000000100)="91f922c8ce8b2de73c12d78d138b13b97829754a536ab8a0", 0x18, 0x6, 0x0, 0x1, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f00000002c0)="888c49f4d8f28d18488f212f1730787fa6569cc050faf9a0179962fdd95f25be3c5bc054539f2c6face97e497f4bb90c2317072e8c9b92d8e1a25014eac6a65025229f6e7216e10c1ed778f60b7b92e115b9b8ffd748e00f5641b4d0", 0x5c, 0x54, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xe22, r5, &(0x7f0000000440)="d1e18a78e792f3f67734524bd1e08e0867a6782b30eaebf26593ddfdbe80b5d74e6fbdd09bb9e8040946b77607d3c1afb00d50ae37a45e7ac88d016b4f5a6cc9707f3c0d9d89b341534da23fd5480e26c3eaba0e8ff1a547fc00e7c4ecdc950242ddc8f4f5be99b22ba04a60bced46ae954dc6fe595bbf6b4a83da32ff203fc91dfb296f4cdd434fa5a4a6c75a1ded546e5d70dc75dfc42f8fb7e33f35bfed08e0775ad410d339b2", 0xa8, 0x0, 0x0, 0x2, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000000380)="78216e568e6920bbc282ce6780da046aca6257ab7c0e661cdc2420be2ad5c4b6a93db4", 0x23, 0xa}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x1, r6, &(0x7f0000000540)="4745bd8a0cc43899cf3f676f9e37a805a20e930d05f7a9fa824cc1ad630716641515bbfbb7ce25f2777a98620a83ced1d0125ed7159333d758a5af2984d1404a8f4c63040d3b59f5f71ad6a373e79e3821cb24b0eec071db60793ce2c2dee23347f1fbc13a0e7dc28312bbe47789087f0e2e6356c5b0bce59e4669dffa088d2d73dcd0875971660847be03e0428c77305428f746e55295e1a7c6ef7217924b70bbf999f7fc07424bf824e821e88b8f19863ef206a057feafb8ef14ded52efca5bc6b361d1cc035b2d13e05a24da3d26144485c6dbbb6c93f19a37b7a2e18", 0xde, 0xfffffffffffffff9, 0x0, 0x2, r7}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x6, 0x81, r8, &(0x7f0000000700)="ea320ea8c0d8e97458347831ed3df896160047550f1baa9b9f2d8c93b373fca955ef8c152daa0f3bec5fb4fb4027c6f0b4b79e189deea24ddfdae3e752ef17d2cd287231ec11c844c4c97d42c0aa78b2ec9d6f69971216aac6ba929bf5dff1bb247f99ca5752e1ec9c97ec38648f0cd9b6bc8d127fca442b75e567bc9fbcce959be59ecc26", 0x85, 0x40000000, 0x0, 0x4, r10}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000b40)="6d731663d13c71ca4fc0ebe1e5a566742f93dd1ff16e92706d3f324f5306ffb1a6b4c52733c08696d890d2cc2cdd720738caf885275abc24afef85bea0e077ad760b1159b70d31dd78b3e35fc96159f11f05849fe2d497f0f08d5938d053d961260cbc164f2c4c59d7790b55df3c8435a42f5e6869ea68c0fd1ba03c00433b39cba49428f2cb9b1433b171216c4b28a2370939ffae21d0d1a0f26bd67a6e964aa795bfd8df3e8c153d509cb88e0bed93b3307a8515055f93e4df5cb21c78e17c0f189eb40d", 0xc5, 0x0, 0x0, 0x6}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x1, 0x800, r11, &(0x7f0000000c80)="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", 0x1000, 0x7, 0x0, 0x0, r12}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$inet6(0xa, 0x400000000001, 0x0) close(r13) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r14, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r15 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000, 0x101}, &(0x7f0000000280)=0xc) ftruncate(r15, 0x200004) sendfile(r13, r15, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r16 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r16, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001d00)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000e0020000900100009001000000000000000000000000000048020000480200004802000048020000480200000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300190010000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000066736d00000000000000000000000000bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d28e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8000000000000000000000001000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ba70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b8000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000d300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000feff000000000000000000f611c88b2459488cdd6bac92bd370dc50b1762b00633d795d302eb0d01ed84807baceb4eb9f9f3dcad1e4dc9134a3522fd"], 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x120001, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000400)=0x1ff) 06:17:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="1b0bc7dd48dc69e7b9ae7fde61db81a879eec7"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 06:17:07 executing program 4: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x3b}, 0x5}, 0x1c) [ 203.461803] print_req_error: I/O error, dev loop9, sector 2 [ 203.467609] hfsplus: unable to find HFS+ superblock 06:17:07 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x307, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd27, 0x25dfdbfe, {0x80, 0x80, 0x20, 0x3f, 0xfc, 0x3, 0xfd, 0xc, 0x3000}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4001) [ 203.995990] audit: type=1804 audit(1582525028.120:43): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/3/file0/file0" dev="loop2" ino=3 res=1 [ 204.055880] audit: type=1804 audit(1582525028.150:44): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/3/file0/file0" dev="loop2" ino=3 res=1 [ 204.159586] audit: type=1804 audit(1582525028.150:45): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/3/file0/file0" dev="loop2" ino=3 res=1 06:17:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x1, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10002, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000001c0)={0x100, 0x8001}) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r7 = epoll_create1(0x0) r8 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)) getsockopt$inet_dccp_buf(r8, 0x21, 0x2, &(0x7f0000000340)=""/19, &(0x7f0000000440)=0x13) getpid() r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x1538c0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0xd) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x9, 0x0, 0x4, 0x1000, 0x39dc, {0x0, 0x7530}, {0x0, 0xc, 0x0, 0x6, 0x0, 0x80, "e798de6d"}, 0xff, 0x4, @fd, 0x0, 0x0, r4}) 06:17:08 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)="07a4a550c353f24657147b3145f2e67a7dedd8446b8daca6f74132280012c4a0dfb958aeab9f60c6b29311ddcc53eb727658a983a91967977f8b89efea6bcf129f4c87ca3218a4a163c0d68629b8bd034d2b286036cbc16b73f8", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a80)="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", 0x201}], 0x1}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c8010000f8000000c8010000f8000000c8020000c8020000c8020000c8020000c80200000400000000000000000000004cc7872711511674c05009ff3488171900000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000736974300000000000000000000000006272696467655f736c6176655f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000fe880000000080000000000000000001fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000005d00000068737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000d800000100000000000000000000000000000000000000000000000030006c327470000000000000000000000000000000000000000000000000000000000000000000000000020000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000002000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="080300004a020000000000000000000000000066509f1de517568b0000000000e62fb1c2062a6d000000000046c08f6d2528d4c7a9e090e2c82dc8e3c8acdfb70fc607d4b1848016d5295f630aeb5671f2bd31270a1d2514f96be0b9e114a97ef7f6ffff5be47a2932ff46ce806dfe50f3119e0d54f52d1e561690ef6d61b6cf7d09897a3edd0b7304ca191e50d005b7f8d159d859c09e132684249396b45eb6ccf345fbfe1f23bb50e468ec24d2cd873799e1a846ccc0a92c9609e588d58e1c6ced77b8a379cac3070946cd8383e25d5b9b00d77579504ed4a318bb5904befe00f8f44d0dd307ed587dcc0600000000000000c69c31943f654d2234d6eb596ea8dc60626f64e4aeb6dd7aaa921c49f1a8344f3c4820c321"], 0xfdef) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) 06:17:08 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) [ 204.724387] ip6_tables: ip6tables: counters copy to user failed while replacing table 06:17:08 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) 06:17:09 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) [ 204.886921] ip6_tables: ip6tables: counters copy to user failed while replacing table 06:17:09 executing program 5: userfaultfd(0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r1, r0, 0x0, 0x3d) 06:17:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0xa08, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x8, 0x4) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8, 0x6, 0x9, 0x5, 0x4}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8907db3c585b"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_WIPHY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x44) 06:17:09 executing program 3: capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000380)) open(&(0x7f0000000080)='./bus\x00', 0x4001c9843, 0x0) 06:17:09 executing program 5: userfaultfd(0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r1, r0, 0x0, 0x3d) 06:17:09 executing program 5: userfaultfd(0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r1, r0, 0x0, 0x3d) 06:17:09 executing program 3: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0xb, @raw_data="0c4301328f1047dd4e165a6e12ab57e09df293c9d9c1f03fb045232b01eddaba22b2a612bf534bcc17763c7f202aaf99f64a8841223b7575a6ac8fd27ae8762d7b8431613ce348fababa001754b0dfe03e2af3ba6b99079f74594f23525bb2a3d58ef5d7ae4f0f391a6289226f2ef0ea36438a8a79e1121a561ab7d42ea94a274d9e3b9da2ff6cc43c8f6ad5d438f239295f103a1fd1c0e4515e21f1c8e47fa6517fcdbce786ad1a2454e338bf1d65eab0b96e21673f115c6a1f4bbed057f9acf1cb1e932a293965"}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000003c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001600000426bd7000fcdbdf250a010100", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffffffffffff75d3c56cd7f97b646e5dd2253d8b22f7521bdc96c85ed115f8ed3bf45cf190ac097b820872892be66246ee60412580dda51968ab8641112f9e9b994960e1acf5ac4f3b04010000004a772be2d4e74ad52638ae084ccac09ed4eb5c25b920b1ad179ac0fef19f054d174f6c595d0ceaa4997bba475324db050f7dd14eec21857dd63c0842"], 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) write$P9_RMKNOD(r3, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x80, 0x0, 0x7}}, 0x14) recvfrom(r2, &(0x7f00000008c0)=""/66, 0x42, 0x20, &(0x7f0000000940)=@un=@abs={0x44287d98488ac579, 0x0, 0x4e23}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)) r6 = accept4$alg(r5, 0x0, 0x0, 0x80800) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x82680, 0x0) sendmmsg$sock(r6, &(0x7f0000000200)=[{{&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @local}, 0x1, 0xc, 0x2, 0x2}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="ef48a7b84e582db6b8a03c96c67156ac6493759f340b4e026eff9d39af41ea11fcc0f645d34ef2a44071d1abc111bb4128525a06f860b489c818fab6fc0e0cf06dd7a8d82ca9060d02ddb87cdef80628dc3a3ed6401026ff96164863dfc56cb97b5462f37032f3389f4803f2d937515073b5c2fd3199b371a8da363c75f05ac6853de24d4e9dfaa683ac460c8acf7dc80bd12690f01fde96126bd1fe04e6f61b87de2b98898828846ff16c3abbe7496145729f7a08f0ede98b6b8c", 0xbb}, {&(0x7f0000000400)="509f1156915fcebce7789c48bc2d4fad35bda027166e64fbf969c28390f4dbd81f06f6c3ff94a7e2514ce7a5f07ad569dd", 0x31}, {&(0x7f0000000a80)="ea1d29b8517d78a01031d8a965c091cf32293ee68eb89d975b8a6fc87c6be020ba9252249f68352151d21762542183f56d6c760da7a972c925a0e2d9eb70c5b0a8b7492740e400a51766d2164ee516edeed9dbf53c51be22030ff02a8eaf54c0b45f5d458dc1461146e985b481c883a0882c8cc5849118fe4fc88477ec5a298c1f294ba73c5f3c15528e1913acfb5dfbc3625d7668cad2223d765e9ff21f", 0x9e}], 0x3, &(0x7f0000000800)}}], 0x1, 0x8000) syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x80, 0x800) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 06:17:09 executing program 5: userfaultfd(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) [ 205.143159] audit: type=1400 audit(1582525029.270:46): avc: denied { setopt } for pid=7770 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.365536] overlayfs: filesystem on './file0' not supported as upperdir 06:17:09 executing program 4: syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)='vmnet1\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40600, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) r5 = getpid() tkill(r5, 0x9) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xd8, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 06:17:09 executing program 5: userfaultfd(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) 06:17:09 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r2, 0xf01}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x84, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = dup2(r5, r3) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) recvmmsg(r4, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 06:17:09 executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/165, 0xef) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) r7 = epoll_create1(0x0) r8 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000480)=0xc) r10 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0xffffffff, 0x934, {}, {0xee01}, 0x1, 0x4a0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x200000, &(0x7f0000000500)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize'}}], [{@euid_eq={'euid', 0x3d, r9}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_gt={'fowner>', r10}}, {@obj_type={'obj_type', 0x3d, '-vboxnet1,'}}, {@euid_eq={'euid', 0x3d, r11}}, {@obj_type={'obj_type', 0x3d, '!V&.'}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@pcr={'pcr', 0x3d, 0x38}}]}}) r12 = socket$unix(0x1, 0x5, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r13, 0x40045565, 0x287) r14 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x3ff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x204801, 0x0) 06:17:09 executing program 3: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x10802) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/4096) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000002141008000800020012000000", 0x24}], 0x1}, 0x0) 06:17:09 executing program 1: syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="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", 0x200}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x143080, 0x180) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4481001}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video1\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x20040, 0x108) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000580)={0x1, 0x0, 0x2, 0x7fff, 0x5}, 0xc) 06:17:09 executing program 5: userfaultfd(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) [ 205.582372] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. 06:17:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xffff) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3ff, 0x200) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x44005) read(0xffffffffffffffff, 0x0, 0x0) [ 205.633536] NFS: bad mount option value specified: vmnet1 [ 205.666291] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 205.692665] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. 06:17:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x18, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x4, 0x10}]}, 0x18}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd06, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x70, 0x80, 0x70, 0x7, 0x5, 0x0, 0x1, 0x110, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000540), 0x4}, 0x4200, 0x1f, 0x400, 0x0, 0x0, 0x434, 0x6}, 0xffffffffffffffff, 0xc, r1, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) syz_open_procfs(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x4, 0x1}, 0x0, 0xd71a, 0x0, 0x0, 0x0, 0x0, 0xe52}) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x4}) r5 = epoll_create1(0x0) r6 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5207}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fallocate(r3, 0x11, 0x0, 0x100000001) 06:17:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x98428d57a99b5f44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_setup(0x4, &(0x7f00000004c0)=0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000000)) io_submit(r5, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x100000003, 0x804000, 0x28120001) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="a40c4b311a35b652ab8afe91cb1880a8ee39c0bd74a05e604230df994b5d43cc5a02069717a111324f140df510677dbfd181651ae645c808dd0786afdbf3e701f22582025bbb80ca156e379f2ee624d67e27d204073ac14d5767d5fd331f93778d53950a4f26bdc4f63fdabc37a6e6543b20c347b26ffdd24e068f5e679fa04aad9fbedaec5a18d12c0000000000000000"], 0x1) 06:17:09 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 205.817560] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. 06:17:10 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 205.925100] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 205.939147] audit: type=1400 audit(1582525030.060:47): avc: denied { create } for pid=7838 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 06:17:10 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x17, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000000)={0x800, 0x0, 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 06:17:10 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r2, 0xf01}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x84, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = dup2(r5, r3) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) recvmmsg(r4, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 06:17:10 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x18, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x4, 0x10}]}, 0x18}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd06, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x70, 0x80, 0x70, 0x7, 0x5, 0x0, 0x1, 0x110, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000540), 0x4}, 0x4200, 0x1f, 0x400, 0x0, 0x0, 0x434, 0x6}, 0xffffffffffffffff, 0xc, r1, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) syz_open_procfs(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x4, 0x1}, 0x0, 0xd71a, 0x0, 0x0, 0x0, 0x0, 0xe52}) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x4}) r5 = epoll_create1(0x0) r6 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5207}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fallocate(r3, 0x11, 0x0, 0x100000001) 06:17:10 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r2, 0xf01}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x84, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = dup2(r5, r3) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) recvmmsg(r4, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 06:17:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x80) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) [ 206.818549] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). 06:17:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x80) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) 06:17:11 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) creat(&(0x7f0000000240)='./file0\x00', 0x80) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) 06:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="110700000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="294fb6064868e50dd95521986bde284a08d2fc9f80c736b041455509e2fc604959670e102b5cfd4275ba7bded2648805e01505a3a8536d3d63f39c0939385c754d849770f4902fd04bd176c3350298826126b63a5504f5d761f90f451834bd6a9170db43b793a1ba"], 0x1c}}, 0x0) 06:17:11 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:11 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0x4cb, 0x40, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x81]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r5 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x9, 0x4, 0x4, 0x1000, 0x0, {0x0, 0x7530}, {0x1, 0xc, 0x0, 0x6, 0x0, 0x80, "e798de6d"}, 0xff, 0x4, @fd=r5, 0x3fa2, 0x0, r4}) 06:17:11 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x4, 0x5, 0x4, {0x6, @pix_mp={0x200, 0x7ff, 0x35315241, 0x3, 0x9, [{0x62, 0x541}, {0x3, 0x800}, {0x7, 0x81}, {0x3, 0x54}, {0x7fffffff}, {0x8001, 0x1}, {0x81, 0x7}, {0x6}], 0x0, 0x1, 0x6, 0x1, 0x5}}, 0x7ff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 207.687234] QAT: Invalid ioctl 06:17:12 executing program 1: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2a) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000001c0)="2b754ea84c118dec5be59cb0ef2474d08d78aefccde83b6b45c6f483acc70dbce99eb19fda587b9600b212d656bccc3d8e75e2ef98e067bc81f715fca7a614d0521fe99b23e263e908975edf650bfef77e7a95d9f3192fc3f5892bf16126cb4b7f6e79bcf19843453c7ff2caa5f6348e844e69df4501", 0x76}], 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 06:17:12 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:12 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x6d, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2fca768e6a5d25bc0f19b647f6c677fd2c3b9790b511a172c69b6f941359eb84f44ec98d8d735e95955318b360702cd625d016b260064be68a366bbe225edf4f888188e727b21037014e502ec61746a0c624012b716da7540271bb9e952ddb088000"/109]}, 0xe5) 06:17:12 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) r5 = openat$cgroup_procs(r2, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') r7 = open(0x0, 0x40c2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x160, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x595baa16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67796e18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa42}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cf7947f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33d70c53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb070}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9765}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7fc8e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60048453}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2438}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5d2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48594bed}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8c1a28}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x241d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x574d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x611c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa520}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ca9ba46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c0b6402}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6982bcbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcec5}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c5b9603}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf765}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1202}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58801207}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc099}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x466a1988}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbf9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681a22e3}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x4044810}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r1, r5, 0x0, 0x8000000a) 06:17:12 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = epoll_create1(0x0) r7 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)) ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast}) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX=r8], 0x12) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000100)=""/30) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 06:17:12 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000780500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a001400aaaaaaaaaaaa00000600270000000000"], 0x48}}, 0x0) 06:17:12 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:12 executing program 3: getpid() mq_open(&(0x7f0000000180)='wlan1{$\xf9lo\x00', 0x0, 0x4, &(0x7f0000000240)={0x8, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 06:17:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x2d) pwritev(r5, &(0x7f0000000340), 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r6 = creat(0x0, 0x0) r7 = fcntl$getown(r6, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendfile(r8, r9, 0x0, 0x1) [ 208.123107] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! 06:17:12 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 208.176762] EXT4-fs (loop1): invalid inodes per group: 16384 [ 208.176762] [ 208.326871] EXT4-fs (loop1): invalid inodes per group: 16384 [ 208.326871] 06:17:12 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x2d) pwritev(r5, &(0x7f0000000340), 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r6 = creat(0x0, 0x0) r7 = fcntl$getown(r6, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendfile(r8, r9, 0x0, 0x1) 06:17:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x40808) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x108, r2, 0x524, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8380}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) r3 = creat(&(0x7f0000000980)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) io_submit(0x0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$selinux_load(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x20c) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') chdir(&(0x7f0000000180)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_LK(r6, &(0x7f0000000400)={0x28, 0x0, 0x5, {{0x4, 0x9, 0x3, r0}}}, 0x28) 06:17:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x2d) pwritev(r5, &(0x7f0000000340), 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r6 = creat(0x0, 0x0) r7 = fcntl$getown(r6, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendfile(r8, r9, 0x0, 0x1) 06:17:12 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:12 executing program 3: getpid() mq_open(&(0x7f0000000180)='wlan1{$\xf9lo\x00', 0x0, 0x4, &(0x7f0000000240)={0x8, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 06:17:12 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:13 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xffffffa8) r2 = epoll_create1(0x0) r3 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) getsockname$l2tp(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="97295163efe87ab40ac5b75c975ce40b1853fb288f4135382a1fa060874f85de7dcb", 0x22, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)={0x0, 0x3}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x0, 0x12, r4, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="befd3f5d6c1d63a177d992f0fdf952446c", 0x11, 0x40, 0x0, 0x0) 06:17:13 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x2d) pwritev(r5, &(0x7f0000000340), 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r6 = creat(0x0, 0x0) r7 = fcntl$getown(r6, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendfile(r8, r9, 0x0, 0x1) 06:17:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48014}, 0x40044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 06:17:13 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = epoll_create1(0x0) r7 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)) ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast}) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX=r8], 0x12) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000100)=""/30) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 209.030161] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 06:17:13 executing program 3: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x5, 0x0, "9b7bd711"}, 0x10001, 0x3, @offset=0xe8aa}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket(0x2000000000000022, 0x2, 0x10000000000002) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000240)) read$FUSE(r1, &(0x7f0000000380), 0x1000) 06:17:13 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) [ 209.101128] SELinux: failed to load policy 06:17:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x442000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="66ec6474657200000000000000000000000000000000000000070000000000000001000065fc317153908b1423dc6a145058a15187f2255ece1b34ce145f1864862b682fddae027face6c52d887515d5998097ac1742c2d83fdda9b8800de6e57bd125a72a1f705ac3f9f2ec2dd5f75a2cb293e291ba2b9facad8b1f660865071fecac6b90ecf973e44735467b11490c8de09013aa1389463ff861ae40bb903fd37bb5bb"], &(0x7f00000001c0)=0x1) syz_open_procfs(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x9, 0x0, "4646485f510ae7011ad73c716b4882fe39969e888af8606b1b202f160cfb12e0119fb4177051bb3cd40c11703f3966f9c766ccc3a735292f76347205825a856ded91fe41c950368fb634f21090d9a7e3"}, 0xd8) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_setup(0x3, &(0x7f00000000c0)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_hsr\x00', {0x1}, 0x1ff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x383002, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x428602, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x76006e) 06:17:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x2d) pwritev(r5, &(0x7f0000000340), 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r6 = creat(0x0, 0x0) r7 = fcntl$getown(r6, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r7, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendfile(r8, r9, 0x0, 0x1) 06:17:13 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) 06:17:13 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x80000000) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r15 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r18 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r18, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r18, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r21 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r21, 0x1, 0x3e, &(0x7f00000002c0)=r20, 0x4) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e24ef60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a745f801ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb62203099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b802000000000000ea334d8323893c5337669dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a4ecdc7cec61ce63000000800117009a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4a9590c35c4a84296697ab4390af9a9ceafd07e1baf466abc09669741c166d81d97bec9d9e17b0f5b6c3ba072013b9cfb20a644366094112d32fad7c055119998ba2a870cee5669494d52393e5c0bac4bc64c090f1ea6763ffb5f1de2079d8fb9b92603097a70660dea3bb7957118d11509541853bcef4e45a42151bb"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r22, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r23 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r23) ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a1, &(0x7f0000000680)='&@[\x00') r24 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r24) ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r25, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r26 = socket(0x2c, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r25, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r17, @ANYRES16=r23, @ANYRESHEX=r14, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[], @ANYRESOCT=r20], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESHEX=r26, @ANYRES32=r15], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) [ 209.443859] ubi0: attaching mtd0 [ 209.538339] ubi0: scanning is finished 06:17:13 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x81000100) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/211, 0xd3}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fallocate(r1, 0x7, 0x6, 0x6) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r1, &(0x7f00000017c0), 0xf7, 0x0) [ 209.573669] ubi0: empty MTD device detected [ 209.817467] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 209.833819] SELinux: failed to load policy [ 209.872799] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 209.913347] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 209.948320] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 209.966980] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 209.987802] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 209.995303] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3287218847 06:17:14 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xffffffa8) r2 = epoll_create1(0x0) r3 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) getsockname$l2tp(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="97295163efe87ab40ac5b75c975ce40b1853fb288f4135382a1fa060874f85de7dcb", 0x22, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)={0x0, 0x3}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x0, 0x12, r4, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="befd3f5d6c1d63a177d992f0fdf952446c", 0x11, 0x40, 0x0, 0x0) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, r1, 0x0, 0x3d) 06:17:14 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10d24fc000c0000000a000900053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x3087c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = epoll_create1(0x0) r4 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7b1c0f00b2cd06fb}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000100b0601040000030900020073797a32000000000000000000227e3329c689cc3d697ef9e9b9a115c22cea648bac7dd9f62356967911a9fd61836b383a885fc5eb65d6536f71f7bd74dd31b942b4b29058aee673e12b1646a68e8c363ea83fe3412ded6e0c3dbe0333b8373c8e85f588ce6024f3213192ace41284139520b95c15c13c8171ec8eb6fe5672b53d26bd0eb4f0abac37454cec0121e91f721f880656a065df2431a93e8ec7b72e"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8081) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x20, 0x4) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 06:17:14 executing program 2: r0 = semget$private(0x0, 0x3, 0x200) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) [ 210.013967] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 210.023650] ubi0: background thread "ubi_bgt0d" started, PID 8063 06:17:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x442000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="66ec6474657200000000000000000000000000000000000000070000000000000001000065fc317153908b1423dc6a145058a15187f2255ece1b34ce145f1864862b682fddae027face6c52d887515d5998097ac1742c2d83fdda9b8800de6e57bd125a72a1f705ac3f9f2ec2dd5f75a2cb293e291ba2b9facad8b1f660865071fecac6b90ecf973e44735467b11490c8de09013aa1389463ff861ae40bb903fd37bb5bb"], &(0x7f00000001c0)=0x1) syz_open_procfs(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x9, 0x0, "4646485f510ae7011ad73c716b4882fe39969e888af8606b1b202f160cfb12e0119fb4177051bb3cd40c11703f3966f9c766ccc3a735292f76347205825a856ded91fe41c950368fb634f21090d9a7e3"}, 0xd8) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_setup(0x3, &(0x7f00000000c0)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_hsr\x00', {0x1}, 0x1ff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x383002, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x428602, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x76006e) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 210.075232] SELinux: failed to load policy 06:17:14 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000280)={0x5, 0x8, 0x0, 'queue1\x00', 0xa38}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="159300008c0500000000670000000500170900000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x880) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000980)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) io_submit(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:10 0', 0x1b) syz_genetlink_get_family_id$tipc(0x0) chdir(&(0x7f0000000180)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) [ 210.271968] ubi: mtd0 is already attached to ubi0 06:17:14 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x80000000) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r15 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r18 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r18, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r18, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r21 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r21, 0x1, 0x3e, &(0x7f00000002c0)=r20, 0x4) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e24ef60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a745f801ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb62203099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b802000000000000ea334d8323893c5337669dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a4ecdc7cec61ce63000000800117009a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4a9590c35c4a84296697ab4390af9a9ceafd07e1baf466abc09669741c166d81d97bec9d9e17b0f5b6c3ba072013b9cfb20a644366094112d32fad7c055119998ba2a870cee5669494d52393e5c0bac4bc64c090f1ea6763ffb5f1de2079d8fb9b92603097a70660dea3bb7957118d11509541853bcef4e45a42151bb"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r22, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r23 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r23) ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a1, &(0x7f0000000680)='&@[\x00') r24 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r24) ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r25, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r26 = socket(0x2c, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r25, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r17, @ANYRES16=r23, @ANYRESHEX=r14, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[], @ANYRESOCT=r20], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESHEX=r26, @ANYRES32=r15], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) 06:17:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x442000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="66ec6474657200000000000000000000000000000000000000070000000000000001000065fc317153908b1423dc6a145058a15187f2255ece1b34ce145f1864862b682fddae027face6c52d887515d5998097ac1742c2d83fdda9b8800de6e57bd125a72a1f705ac3f9f2ec2dd5f75a2cb293e291ba2b9facad8b1f660865071fecac6b90ecf973e44735467b11490c8de09013aa1389463ff861ae40bb903fd37bb5bb"], &(0x7f00000001c0)=0x1) syz_open_procfs(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x9, 0x0, "4646485f510ae7011ad73c716b4882fe39969e888af8606b1b202f160cfb12e0119fb4177051bb3cd40c11703f3966f9c766ccc3a735292f76347205825a856ded91fe41c950368fb634f21090d9a7e3"}, 0xd8) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_setup(0x3, &(0x7f00000000c0)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_hsr\x00', {0x1}, 0x1ff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x383002, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x428602, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x76006e) 06:17:14 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000280)={0x5, 0x8, 0x0, 'queue1\x00', 0xa38}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="159300008c0500000000670000000500170900000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x880) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x4000) ioctl$KDSIGACCEPT(r0, 0x5606, 0x0) [ 210.437603] ubi: mtd0 is already attached to ubi0 06:17:14 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10d24fc000c0000000a000900053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x3087c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = epoll_create1(0x0) r4 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7b1c0f00b2cd06fb}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000100b0601040000030900020073797a32000000000000000000227e3329c689cc3d697ef9e9b9a115c22cea648bac7dd9f62356967911a9fd61836b383a885fc5eb65d6536f71f7bd74dd31b942b4b29058aee673e12b1646a68e8c363ea83fe3412ded6e0c3dbe0333b8373c8e85f588ce6024f3213192ace41284139520b95c15c13c8171ec8eb6fe5672b53d26bd0eb4f0abac37454cec0121e91f721f880656a065df2431a93e8ec7b72e"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8081) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x20, 0x4) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:14 executing program 1: add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() sched_setattr(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x15092e2a1832a052) prctl$PR_GET_FP_MODE(0x2e) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0xc37, 0x8, '\x00', 0x7ff}, 0x4, 0x0, 0xd4d, r1, 0x8, 0xfffffffa, 'syz0\x00', &(0x7f0000000280)=['/selinux/policy\x00', 'selfeth0+proc\x00', 'syz', 'nl80211\x00', ':ppp1[]+\x00', '/dev/vsock\x00', '%\x00', 'user\x00'], 0x44, [], [0x2, 0x1, 0x67, 0x7]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @ipv4={[], [], @remote}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x5, 0xa, 0x1bb, &(0x7f0000000640)="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"}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 06:17:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x442000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="66ec6474657200000000000000000000000000000000000000070000000000000001000065fc317153908b1423dc6a145058a15187f2255ece1b34ce145f1864862b682fddae027face6c52d887515d5998097ac1742c2d83fdda9b8800de6e57bd125a72a1f705ac3f9f2ec2dd5f75a2cb293e291ba2b9facad8b1f660865071fecac6b90ecf973e44735467b11490c8de09013aa1389463ff861ae40bb903fd37bb5bb"], &(0x7f00000001c0)=0x1) syz_open_procfs(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x9, 0x0, "4646485f510ae7011ad73c716b4882fe39969e888af8606b1b202f160cfb12e0119fb4177051bb3cd40c11703f3966f9c766ccc3a735292f76347205825a856ded91fe41c950368fb634f21090d9a7e3"}, 0xd8) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_setup(0x3, &(0x7f00000000c0)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_hsr\x00', {0x1}, 0x1ff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x383002, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x428602, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x76006e) 06:17:14 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 210.816919] ubi: mtd0 is already attached to ubi0 06:17:14 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10d24fc000c0000000a000900053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x3087c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = epoll_create1(0x0) r4 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7b1c0f00b2cd06fb}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000100b0601040000030900020073797a32000000000000000000227e3329c689cc3d697ef9e9b9a115c22cea648bac7dd9f62356967911a9fd61836b383a885fc5eb65d6536f71f7bd74dd31b942b4b29058aee673e12b1646a68e8c363ea83fe3412ded6e0c3dbe0333b8373c8e85f588ce6024f3213192ace41284139520b95c15c13c8171ec8eb6fe5672b53d26bd0eb4f0abac37454cec0121e91f721f880656a065df2431a93e8ec7b72e"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8081) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x20, 0x4) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) [ 210.876039] kauditd_printk_skb: 4 callbacks suppressed [ 210.876049] audit: type=1400 audit(1582525035.000:49): avc: denied { ioctl } for pid=8132 comm="syz-executor.1" path="socket:[31851]" dev="sockfs" ino=31851 ioctlcmd=0x5511 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 211.165062] overlayfs: './file0' not a directory 06:17:15 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2000c008) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x7e, &(0x7f0000000740)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x2, 0x7, 0x1, 0x3}) 06:17:15 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x80000000) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r15 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r18 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r18, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r18, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r21 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r21, 0x1, 0x3e, &(0x7f00000002c0)=r20, 0x4) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r22, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r23 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r23) ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a1, &(0x7f0000000680)='&@[\x00') r24 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r24) ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r25, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r26 = socket(0x2c, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r25, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r17, @ANYRES16=r23, @ANYRESHEX=r14, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[], @ANYRESOCT=r20], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESHEX=r26, @ANYRES32=r15], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) 06:17:15 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r4 = getpid() tkill(r4, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r3, @ANYBLOB="96f47bc9e73d8e58347db0a4ca5312a94b0e9ee6e094926355fb6b1a2f77f07703629b687a918678c9d8ad9a404b567539de52be1faa405d7960bbe549065a628dc5178ff0ccd20a78707f647698c2631596f99e173d5aadb15a59246f291eedb0bdd05202d1cbec6d2f6b85c52a49643d6d4b3f11b0be75bebc00d085f18d560e67432b4ec89a756f4f62e709e6a1006d7bc8fe633c0ef17248f732221ac1c78b30c3b5393b8bb98a556a25c05e1bf84efa48110c10e3886b5c8eaa27088f1c7972c2daa68e65e3e422d1ff73a1e9a7691d332f354161dbfe79f0824a1c9f33fbc1fda25091bdeb8dffc49fbb"], 0x5}}, 0x40004010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x68) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") 06:17:15 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10d24fc000c0000000a000900053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x3087c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = epoll_create1(0x0) r4 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7b1c0f00b2cd06fb}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000100b0601040000030900020073797a32000000000000000000227e3329c689cc3d697ef9e9b9a115c22cea648bac7dd9f62356967911a9fd61836b383a885fc5eb65d6536f71f7bd74dd31b942b4b29058aee673e12b1646a68e8c363ea83fe3412ded6e0c3dbe0333b8373c8e85f588ce6024f3213192ace41284139520b95c15c13c8171ec8eb6fe5672b53d26bd0eb4f0abac37454cec0121e91f721f880656a065df2431a93e8ec7b72e"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8081) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x20, 0x4) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) [ 211.289648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:15 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(0x0, 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00fffffff60000001c0012800b00010067726574617000001c0102803f00000000000000"], 0x3c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x1) 06:17:15 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(0x0, 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 211.473575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.496277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00fffffff60000001c0012800b00010067726574617000001c0102803f00000000000000"], 0x3c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=0x1) 06:17:15 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(0x0, 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 211.593435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:15 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x80000000) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r15 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r16, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r18 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r18, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r18, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r19 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r19, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r21 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r21, 0x1, 0x3e, &(0x7f00000002c0)=r20, 0x4) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r22, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r23 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r23) ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r23, 0x89a1, &(0x7f0000000680)='&@[\x00') r24 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r24) ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r24, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r25, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r26 = socket(0x2c, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r25, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r17, @ANYRES16=r23, @ANYRESHEX=r14, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[], @ANYRESOCT=r20], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESHEX=r26, @ANYRES32=r15], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) 06:17:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r3 = getpid() tkill(r3, 0x9) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() tkill(r6, 0x9) perf_event_open(0x0, r6, 0x4, r1, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r7, &(0x7f0000001400)="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", 0x600) sendfile(r7, r8, 0x0, 0x10000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000006846ecf4ccd0af8096ba557598e9c2c803b73c785cc051839172b68d5627cf2a81886537d3ed579751d9bd1fc584d6fdd4c7500203144832129a1aa6e75b31c034d8e0eb3b38bcba6001168cd3f9a68a2c6585df8719c71faaec47cbe349e493c85e62f05ba751403e619222b84cd5271dbb0b15dd8534b92dbc86048dc00967f6601f4d6e16a037a26a6482e5c2796cb4d10654584b34bfccb11941a618e17839332c793a", @ANYRES16, @ANYBLOB="02002cbd7000000000000d0000001400068008000100feffffff0400020004000200200001800b0001006574683a6c6f0000080003000200000008000300faba0000"], 0x3}}, 0x20000000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r9 = epoll_create1(0x0) r10 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000040)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x400, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:17:15 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:15 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="030200fffffffb00608411aa4b8b60eb9e455fc7a0b7ff3c25c53d0658a145efd614d2a8a9eeabe15b0c5ed079ed19b41f2427c1cd413f116ed94060b60ada5d"], 0x1, 0x2) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x40}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10534, 0x0, 0x0, 0x7}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000040)={0x722}) fdatasync(r4) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r8 = epoll_create1(0x0) r9 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xd15e, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000580)={r10, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) 06:17:16 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:16 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r5 = socket$unix(0x1, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200802, 0x0) getsockopt$sock_int(r7, 0x1, 0x22, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r8 = epoll_create1(0x0) r9 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x210, 0x308, 0x140, 0x308, 0x308, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000000280), {[{{@ipv6={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}, @mcast1, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'syzkaller1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x11, 0x1f, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x16}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0xe}, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, 0x3f, 0x36, 0x800}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, [], 0x33}, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'hsr0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x5d, 0xe0, 0x6, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xd, "91f2"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@ipv6={@rand_addr="3d7a2d56bb4d02297263d6a6ef6f8a9d", @mcast2, [0xffffffff, 0xff, 0x0, 0x7f8000ff], [0x7fffffff, 0xffffff00, 0xff, 0xffffffff], 'macvlan1\x00', 'macsec0\x00', {}, {0xff}, 0x62, 0x0, 0x7, 0x41}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback, 0x28, 0xf, 0x5}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffff00], 'gre0\x00', 'wg0\x00', {}, {}, 0x2c, 0x80, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@dev={0xfe, 0x80, [], 0x15}, 0x39, 0x81, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x101) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'cpusettrusted'}}]}}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) [ 211.948870] audit: type=1804 audit(1582525036.070:50): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/17/bus" dev="sda1" ino=16624 res=1 [ 212.041483] audit: type=1804 audit(1582525036.080:51): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/17/bus" dev="sda1" ino=16624 res=1 [ 212.119439] audit: type=1800 audit(1582525036.120:52): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16625 res=0 [ 212.179903] audit: type=1804 audit(1582525036.230:53): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/17/bus" dev="sda1" ino=16624 res=1 [ 212.215019] audit: type=1804 audit(1582525036.340:54): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/17/bus" dev="sda1" ino=16624 res=1 [ 212.319920] audit: type=1804 audit(1582525036.440:55): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir273293258/syzkaller.FpHxAt/17/bus" dev="sda1" ino=16624 res=1 06:17:16 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10d24fc000c0000000a000900053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6777dd2c59b255af, 0x0) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x3087c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = epoll_create1(0x0) r4 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7b1c0f00b2cd06fb}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000100b0601040000030900020073797a32000000000000000000227e3329c689cc3d697ef9e9b9a115c22cea648bac7dd9f62356967911a9fd61836b383a885fc5eb65d6536f71f7bd74dd31b942b4b29058aee673e12b1646a68e8c363ea83fe3412ded6e0c3dbe0333b8373c8e85f588ce6024f3213192ace41284139520b95c15c13c8171ec8eb6fe5672b53d26bd0eb4f0abac37454cec0121e91f721f880656a065df2431a93e8ec7b72e"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8081) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x20, 0x4) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 06:17:16 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:16 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x9, &(0x7f0000001740)=[{&(0x7f0000000140)="43da9bdd92cd1f42348b28e36165c61c985296ac6b6571deb2998a3830bd9365ab35374a53778a0c1bf5bddeceac28c72336abf7357019c1e6d64a11f22c5b64e12c9ae943b12832dd60becaa62a5435d7ea8684185911ba9003f95b21924153eb6f6fa46723c495ec60a6be0c711807115ea3d5795535f5480d2f18", 0x7c, 0x4}, {&(0x7f0000000280)="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", 0x1000, 0x15c607dc}, {&(0x7f00000001c0)="caa655b6e0d775a803b0effa2c8b03565fc078ba5c0568d3c2c51cea7477b2134f", 0x21, 0xa34f}, {&(0x7f0000001280)="0ac70e8da44da1e4f6db627a4bdc10231bef457ab750917540992c70a8d625e99cf3237ccc36c85e15efcb765400601c0d906bbcfcaaecb4e34f20bfa8b772ec88151322a968ef568b811e5ec81fe0c5d63c539ce61aedd76e7ba705205e45b4e3d20f651e3e5bd049089e82912d8b4e8f10c366150b6dedba4a4db9c82804de3ce22e22d41e11c90727e5327ac18b13e7e190562f891473a39e8170efdfa7ff7887318e7b8ccdb3c6c3cc80651c6a34be687520db446231558d58f865f7ba", 0xbf, 0x9}, {&(0x7f0000001340)="cafad37646651f3292502bdf4181a9f1b43062718413853d14d5be4e4b8573ab43aecfec0423381591565d6427fcdd0412c03c4b42b270b06fdf1a5bba875cab3b308539fc47121e2924eb1d5721a71ac5cff6410ba6dfdc1d491c055ab7bd513fde293a560a377b4bb35dd7d95a83e5d893859a6152a842e98faefbb57a16ad622ad7ff32a79a2d048fe6eee3c61d9fcfbbc8c2540bc5b94cf2e7ceaf1fcf649d9dab32a00ee94b2f9a121a50eadc19c325cc3e525021c247a9fa1678639fd69ade4ff98d697d0c67c2edebefea130373305c985de68676523279769a384b2d9f7539ea69ff3e3dec4660", 0xeb, 0x7ff}, {&(0x7f0000001440)="64ba2da8eac03bad6c81f70108d790e85b422757a00dc84c7a9a953a59a5bcf12858aeed61b04febaca5ddd8c5cc3b62f76820eed8d5d474bbedf94e2c25dfc68f26895180b48937c1a435dc18516da90969276a937189e8db47d618750f7e2b2f6330ff3db7c5b5e0db9b90beff3863cda4101b34c00ec726245d13071fb59ee25abb2775773e612d381afba03499ee6d2417c52d5e07610e053a6a3a8e05981897be79ec0e57f57b8813be83c5962a3ca0e7d6dc67e22c48676f60dadd36d7a349e4", 0xc3, 0x6a8f}, {&(0x7f0000001540)="1498b4a75082de553a65d3740d8c8b7d2e70b93521f0f8efd7000d98530259feb27af62505673c296fcd12805238040df1e1f0895d84f1d0197047651007c8ff3d4f46f5e7b9f679d0fe14818d64eec322dda1246a2c35ddf0f76f4fb9a60360cca123a21a39004992e042db2ff24b696abcd2e647c7ee515d0602367ac602f3e9ab47f543f4853f1cfe589de9970d6edfc6a26f61e29ebaf3e75e4533a0124985c5904f96c34f6897063689cc4fc02170bc7752e224f1f20f594d99d0a1c2d60cb9c21b6f4c7dd2dc665d0b3d2dbbdd80dba0ded586a547", 0xd8, 0x8000}, {&(0x7f0000001640)="01df2bb5e89dd82cae1623a2d98e7a07a1d01c7c051ff96d3ce406b8af3f03178de2dac430c192a366901a03f939fe7376ea5cea3a118c50f0dfe92170b6637c60175363257fdfdebbc72b3722bd22c10685bbdf515924f81eece2e4f0d5af4091efd9d58d1f04eb6a5a247ed32d953e90a067b82f63f1904861b45827433dbdaf461e30d2ee23c9dfe282522cd75ff82988aa196c6c7abf2c188d08ce678553d4bb1124340d4f33a4d7af2e30fbb3b64e66759d2db4c0ed88804f9ef16f9d563a08cac601f066", 0xc7, 0x8000}, {&(0x7f0000000200)="ad1e3e3cf8739f5444ac1462921cfc8368259741bbfac567ca4746e8fcc7a19d9cdf4b6cf00007099d0a93e8567f29878a45c84868f82e30950abf", 0x3b, 0x200}], 0x810000, &(0x7f0000001840)='1') sendto$rose(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$6lowpan_enable(r2, &(0x7f0000000080)='1', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xe, 0x7, 0x1, 0x0, "0eb38cb4917bf85f73f7"}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 06:17:16 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) r3 = dup2(r1, r2) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x73, 0x2, {{0x0, 0x4, 0x7}, 0x2}}, 0x18) syz_open_procfs(0x0, 0x0) read(r3, &(0x7f00000001c0)=""/108, 0xfff4) r4 = epoll_create1(0x0) r5 = socket(0x22, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xe0000016}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={0x0, @ax25={0x3, @default}, @nl=@kern={0x10, 0x0, 0x0, 0x1}, @hci={0x1f, 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_to_bond\x00', 0x8, 0x2b3d}) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000700)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 06:17:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$vhci(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1001) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) setresgid(0x0, r3, 0x0) r4 = getgid() setregid(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002f0000001400000000fbff0f950000005183ea44d49244c84abc8ed11716764b5657ac59b9b2acf8bfd0fd51efe825f5f5346a18c3fd778d6d69232e108b16501abc7f72c58a6f656008551988d49eca2db0d263e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="16d546585d82483fbbfc672f74459dac0d0b43148200000010000124000000000000b9605be70502", @ANYRES32=0x0, @ANYBLOB="08800000000000001800128008000100677265000c000280050017000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) 06:17:16 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3d) 06:17:16 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @isdn={0x22, 0x0, 0xde, 0x0, 0xfa}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x24, @none, 0x0, 0x2}, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000500)=0x8, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40410400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1ec, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe23b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004084}, 0x48000) 06:17:16 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3d) [ 212.732944] audit: type=1400 audit(1582525036.860:56): avc: denied { map } for pid=8250 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 212.813577] audit: type=1804 audit(1582525036.930:57): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir552554145/syzkaller.B01qdv/26/file0" dev="sda1" ino=16624 res=1 06:17:17 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3d) 06:17:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = creat(0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000001200)={0x1f, 0x2, @any, 0x8}, 0xe) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB=',', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = getpid() tkill(r5, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYBLOB=',grou', @ANYBLOB="89fe6f9ed70b"]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x37e) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="35090000000000f9"], 0x8) fallocate(r6, 0x3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x50000000000443) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x50000000000443) r11 = socket$alg(0x26, 0x5, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r12, 0xffffffffffffffff, 0x0, 0x50000000000443) r13 = socket$kcm(0x10, 0x2, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r14, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x60, @media='udp\x00'}}}}, 0x68}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x107202, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:17:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @isdn={0x22, 0x0, 0xde, 0x0, 0xfa}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x24, @none, 0x0, 0x2}, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000500)=0x8, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40410400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1ec, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe23b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004084}, 0x48000) 06:17:17 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3d) [ 212.988778] audit: type=1400 audit(1582525037.030:58): avc: denied { map } for pid=8260 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 06:17:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev, @in=@initdev}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x80, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000400)='./file0\x00', r5}, 0x8032) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffdb, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x4000000000000e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={0x0}, 0x8620, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r6 = epoll_create1(0x0) r7 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)) ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000580)) sched_yield() setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) r8 = accept4$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000002c0)={0x0, r4, 0x86, 0x0, 0x3800, 0x2}) set_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000540)={0x7, 0x2, 0x9, 0x1, &(0x7f0000000380)=[{0x4, 0xf030, 0x9, 0x2}]}) 06:17:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @isdn={0x22, 0x0, 0xde, 0x0, 0xfa}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x24, @none, 0x0, 0x2}, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000500)=0x8, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40410400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1ec, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe23b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004084}, 0x48000) 06:17:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x100200, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x30002008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)) accept4$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r3, 0xf00}, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x1f, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872b53afd874e2f98b579a708628a146d2d0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x202000, &(0x7f0000000140)=ANY=[@ANYBLOB="6944980fddc48fb7bea0d56f64655f7265616461686561645f626c6b733d30783030703030303068e9720a7c991dd4996fb050927e3030303030343030302c6e6f6d6e69745f697461626c652c64656275672c646174613d02726974656261636b2c66756e633d227e291c385f14c08a0c2b3ef2dd06ec2719"]) 06:17:17 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8001, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socket(0x2, 0x800, 0x0) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000040)={0x63a, 0x20, {0x0}, {}, 0x800, 0x1f}) process_vm_writev(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000001c0)}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/133, 0x85}], 0x6, &(0x7f0000001740)=[{&(0x7f0000001640)=""/211, 0xd3}, {&(0x7f0000000580)=""/94, 0x5e}], 0x2, 0x0) 06:17:17 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3d) 06:17:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 06:17:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @isdn={0x22, 0x0, 0xde, 0x0, 0xfa}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x24, @none, 0x0, 0x2}, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000500)=0x8, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40410400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1ec, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe23b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004084}, 0x48000) 06:17:18 executing program 0: socket(0x200000000000011, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28}, 0x28) socket(0x100000000011, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000100)) semop(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x3b}, 0x4}, 0x1c) r9 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88, 0x0, r9}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @rand_addr=0x8}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) 06:17:18 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3d) 06:17:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) [ 214.012809] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 06:17:18 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x0) 06:17:18 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b90003050000002a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x80000001, 0x1, 0x0, 0xc, 0x3, 0x7ff}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) [ 214.111057] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 214.222287] loop3: p2 < > 06:17:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000380)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7ad584", 0xd3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r6, 0x0) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000042696dc2ccb20180000018a27ae5210207531f19bd32e496a16715ee8ea1a8a6bf978158325f6d9a76379b2c05bd3e4a6cda8ed66670324cde8005b7198b7d4d815706e65c6f18e34733dac061bfe800113f25265f8053f8eae3de92ecdf37a9427d4728be55c1ecf7d03c2a84d898d642a7f41f214c2b37c56d07", @ANYRES32=0x0], 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000}, &(0x7f00000001c0)={0x0, r7+30000000}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f0000000900)=ANY=[@ANYBLOB="076eec530e501d5389340c558a3d7ba7571b7f5d74934ba2a7324289f69e54760ab32b1c7a0946fd50fb0566c12b00e62761d17e50b76551820e1d8515371a7730cd48b65a462bc5b0e22fcbc70c246a42c8b9e1a06ace1b623299aab60f13e76ce60c05ae12acef73a55102719899899239", @ANYPTR, @ANYRESHEX], @ANYRES16=r5, @ANYBLOB="020029bd7000fbdbdf25080000001400098008000100ff03000008000100540000002000058014000280080002003f00000008000300060000000800010075647000340006800400020008000100ef4500000400020008000100090000000800010001ffffff040002000400020004000200040002001800078008000200080000000c0004000700000000000000"], 0x3}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) 06:17:18 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x0) 06:17:18 executing program 0: socket(0x200000000000011, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28}, 0x28) socket(0x100000000011, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000100)) semop(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x3b}, 0x4}, 0x1c) r9 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88, 0x0, r9}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @rand_addr=0x8}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) 06:17:18 executing program 5: userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x0) 06:17:18 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x8001, @rand_addr="88c2ba170864b8bb99a72899212cfb2d", 0x20000}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x19f28) [ 214.500774] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 214.539630] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 214.600787] loop3: p2 < > 06:17:19 executing program 0: socket(0xa, 0x2400000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x0, 0x150, 0x0, 0x150, 0x248, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'bond_slave_1\x00', 'batadv0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@dst={{0x48, 'dst\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @ipv4={[], [], @loopback}, [], [], '\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28, 'set\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r3) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x54}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = epoll_create1(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) ftruncate(r2, 0x80006) sendfile(r1, r2, 0x0, 0x8000fffffffe) 06:17:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 06:17:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x5, 0xfffffffffffffd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 06:17:19 executing program 5 (fault-call:6 fault-nth:0): userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 215.036531] xt_connbytes: cannot load conntrack support for proto=10 [ 215.038452] FAULT_INJECTION: forcing a failure. [ 215.038452] name failslab, interval 1, probability 0, space 0, times 1 [ 215.049483] xt_connbytes: Forcing CT accounting to be enabled 06:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x98, 0x98, 0x130, 0x1e8, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, '\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="56f756", 0x3}, {&(0x7f0000000e00)="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", 0x5be}], 0x2}}], 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}) [ 215.161645] CPU: 0 PID: 8391 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0 [ 215.169499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.178863] Call Trace: [ 215.181461] dump_stack+0x142/0x197 [ 215.185104] should_fail.cold+0x10f/0x159 [ 215.189264] should_failslab+0xdb/0x130 [ 215.193246] kmem_cache_alloc_trace+0x2e9/0x790 [ 215.197910] alloc_pipe_info+0xb0/0x380 [ 215.201882] splice_direct_to_actor+0x5d2/0x7b0 [ 215.206540] ? avc_policy_seqno+0x9/0x20 [ 215.210589] ? selinux_file_permission+0x85/0x480 [ 215.215416] ? generic_pipe_buf_nosteal+0x10/0x10 [ 215.220246] ? security_file_permission+0x89/0x1f0 [ 215.225158] ? do_splice_to+0x170/0x170 [ 215.229115] ? rw_verify_area+0xea/0x2b0 [ 215.233181] do_splice_direct+0x18d/0x230 [ 215.237340] ? splice_direct_to_actor+0x7b0/0x7b0 [ 215.242178] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 215.246952] ? __sb_start_write+0x153/0x2f0 [ 215.251276] do_sendfile+0x4db/0xbd0 [ 215.254986] ? do_compat_pwritev64+0x140/0x140 [ 215.259662] ? fput+0xd4/0x150 [ 215.262860] SyS_sendfile64+0x102/0x110 [ 215.266845] ? SyS_sendfile+0x130/0x130 [ 215.270920] ? do_syscall_64+0x53/0x640 [ 215.274886] ? SyS_sendfile+0x130/0x130 [ 215.278854] do_syscall_64+0x1e8/0x640 [ 215.282745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.287578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 215.292754] RIP: 0033:0x45c429 [ 215.295927] RSP: 002b:00007fa5871d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 215.303620] RAX: ffffffffffffffda RBX: 00007fa5871d66d4 RCX: 000000000045c429 06:17:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x83}, 0xa) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) [ 215.310874] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 215.318126] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 215.325380] R10: 000000000000003d R11: 0000000000000246 R12: 0000000000000008 [ 215.332647] R13: 00000000000008d1 R14: 00000000004cb324 R15: 0000000000000000 06:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0xd000, 0x8000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = socket$unix(0x1, 0x5, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x9d0000, 0x7ffe, 0x7f, r3, 0x0, &(0x7f0000000080)={0x990904, 0x2, [], @p_u32=&(0x7f0000000040)=0x8}}) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000000100)=0x3, 0x4) [ 215.404307] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 215.435243] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 215.464326] loop3: p2 < > 06:17:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="09e0b3162b2e18f0fa151a4f145e9f252e71f7b2aa18c4576a93ba3dac2bd9b81193eee4f2bf93924a5c04cdd53e6a1eb4964beb55bfe76ff7d774ddcd54cab56be7c8f59c0448c5c014e1a57e7db3e54bafa4b1a1866403aefe583c161dac9db2055979df3e554a8403411cd51f1e073542ddcc56b01a013e76437375f0f17c9dfe8d7d74fd50a442931b68948c7b22f09dfe87e7a6b6f1f92d10744b5091327a7098da8774f118f6", @ANYRES16=r1, @ANYRESHEX, @ANYRES16=r2, @ANYRES16=r0, @ANYRES64=r0], @ANYRES32=0x0, @ANYRESHEX], 0x3}}, 0x0) 06:17:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80500, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/30) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = epoll_create1(0x0) r6 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x914}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x38}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xe4}}, 0x20004040) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r8 = fcntl$dupfd(r1, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$tun(r8, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xfca) 06:17:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = epoll_create1(0x0) r8 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x2bb98205) splice(r0, 0x0, r4, 0x0, 0x4ff9c, 0x0) [ 215.649154] ip_tables: iptables: counters copy to user failed while replacing table [ 215.685942] ip_tables: iptables: counters copy to user failed while replacing table 06:17:19 executing program 3: syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x883e, 0xc}}}}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0xffffffff, 0x4, 0x4, 0x8, 0x7, {r2, r3/1000+30000}, {0x5, 0x0, 0x37, 0x4, 0x6, 0x88, "8d2e2d69"}, 0x401, 0x3, @userptr=0x6, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000300)={"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"}) 06:17:19 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000940)}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f0000000680)=""/89, 0x59}, {0x0}, {&(0x7f0000000740)=""/17, 0x11}], 0x6, &(0x7f0000000800)=""/215, 0xd7}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f44", 0x4f, r4) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="d217b19a5606d56cf6bf1e54a7dd50ff26e9c24d4f6ee0be3c315a831a3901c0d103c5a517b5b2a0f910a2557a376ef81efc4ebdf66141a05011662308e7c62b93150454cae43f58363ddb61016a49c9", 0x50, 0xfffffffffffffffa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/rt_cache\x00') stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) 06:17:19 executing program 5 (fault-call:6 fault-nth:1): userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) [ 215.900823] ip_tunnel: non-ECT from 172.30.0.4 with TOS=0x2 [ 215.909043] FAULT_INJECTION: forcing a failure. [ 215.909043] name failslab, interval 1, probability 0, space 0, times 0 [ 215.926686] ip_tunnel: non-ECT from 172.30.0.4 with TOS=0x2 [ 215.938261] CPU: 0 PID: 8434 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0 [ 215.946091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.955466] Call Trace: [ 215.958072] dump_stack+0x142/0x197 [ 215.961713] should_fail.cold+0x10f/0x159 [ 215.966744] should_failslab+0xdb/0x130 [ 215.970728] __kmalloc+0x2f0/0x7a0 [ 215.974269] ? kmem_cache_alloc_trace+0x623/0x790 [ 215.979116] ? alloc_pipe_info+0x15c/0x380 [ 215.983357] alloc_pipe_info+0x15c/0x380 [ 215.987435] splice_direct_to_actor+0x5d2/0x7b0 [ 215.992113] ? avc_policy_seqno+0x9/0x20 [ 215.996178] ? selinux_file_permission+0x85/0x480 [ 216.001038] ? generic_pipe_buf_nosteal+0x10/0x10 [ 216.005890] ? security_file_permission+0x89/0x1f0 [ 216.010823] ? do_splice_to+0x170/0x170 [ 216.014806] ? rw_verify_area+0xea/0x2b0 [ 216.018876] do_splice_direct+0x18d/0x230 [ 216.023033] ? splice_direct_to_actor+0x7b0/0x7b0 [ 216.027894] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 216.032659] ? __sb_start_write+0x153/0x2f0 [ 216.037017] do_sendfile+0x4db/0xbd0 [ 216.040768] ? do_compat_pwritev64+0x140/0x140 [ 216.045360] ? fput+0xd4/0x150 [ 216.048558] SyS_sendfile64+0x102/0x110 [ 216.052535] ? SyS_sendfile+0x130/0x130 [ 216.056520] ? do_syscall_64+0x53/0x640 [ 216.060497] ? SyS_sendfile+0x130/0x130 [ 216.064511] do_syscall_64+0x1e8/0x640 [ 216.068406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.073270] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.078461] RIP: 0033:0x45c429 [ 216.081660] RSP: 002b:00007fa5871d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.089376] RAX: ffffffffffffffda RBX: 00007fa5871d66d4 RCX: 000000000045c429 [ 216.096652] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 216.103926] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 216.111204] R10: 000000000000003d R11: 0000000000000246 R12: 0000000000000008 [ 216.118488] R13: 00000000000008d1 R14: 00000000004cb324 R15: 0000000000000001 06:17:20 executing program 2: io_submit(0x0, 0x0, &(0x7f0000001600)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000100)=""/233, &(0x7f0000000040)=0xe9) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000000011905030100000800000b98000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c0006004191d25390769d080001007f0000015241d9928a4672b0c20b3acaebcf3e6df10de3e41b3143f7f17636dc46e47f0a3f1cd4ce77c76e72fc1ddf1e3f000000000000000000000000000000be090248e4ab74764b1108e1e5c2b839ef2f56d5760f6285414ffa7ed2edc846946b783a01e148d741824051a6be4f7771b9666d5e7891e1c46fb9176438ae530e522064745951613166cfcd8bf4366c0a7fdd6a"], 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1a) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) 06:17:20 executing program 5 (fault-call:6 fault-nth:2): userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:20 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x181100, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ffd) mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 06:17:20 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000600)="585ccbc4ed8352b511ce474914dc5500b66147b3c7218a91690000000042e3d35228897512f93191b076ac446ff0022b8753a1fa74ff569f435fb3bac76efb74b50ee93c2db8eae3198a29e5c0cfc60000ce0637ce1ff5ff70e48884ca000018cea71fcfacf40d32feb58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xb7, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)}) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) pipe(0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000884) memfd_create(&(0x7f0000000840)='\x9acpuset-:em0ppp1\x00', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000480)={0xa20000, 0x5fa, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909d9, 0x4, [], @ptr=0xffffffff}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880)='/dev/snapshot\x00', 0x434842, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="159300008c0500000000670000000500170900000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x40, r10, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0xce, 0x75, 0x2, {0xc3, "def6cf07565658351ee2792d950e0bc019feebdfd877d4400086236927e92fa6b07932224cf9862e0cdbccc4438d720b77c864b9c2e6450d54e2a96d75a3d60df2778ae71f0daaa9a01fbece0c8606fd35a88e214cb219d80f726b8f0343cb4e2f90990341a4bc21a300e4061904a597c690b465e72b1cd55f828b8ead83c34958d8595731194d0ba3d70390983b588e3363bf68321a2cf8bb7e403ccdb0ebfea22d55efe822b9681d039157baeee5dab5dc7cfeb61abb3579fc00fd4a12d9da17a2d1"}}, 0xce) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f00000004c0)=0x6, 0x4) [ 216.263066] FAULT_INJECTION: forcing a failure. [ 216.263066] name failslab, interval 1, probability 0, space 0, times 0 [ 216.281555] kasan: CONFIG_KASAN_INLINE enabled [ 216.296173] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 216.316480] CPU: 1 PID: 8448 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0 [ 216.324320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.333684] Call Trace: [ 216.336291] dump_stack+0x142/0x197 [ 216.339941] should_fail.cold+0x10f/0x159 [ 216.344105] should_failslab+0xdb/0x130 [ 216.347676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pig=8454 comm=syz-executor.3 [ 216.348092] kmem_cache_alloc_node_trace+0x280/0x770 [ 216.348106] ? lock_downgrade+0x740/0x740 [ 216.369683] __kmalloc_node+0x3d/0x80 [ 216.373493] kvmalloc_node+0x4e/0xe0 [ 216.377216] iov_iter_get_pages_alloc+0x4a7/0xef0 [ 216.382068] ? iov_iter_revert+0x9c0/0x9c0 [ 216.386307] ? iov_iter_pipe+0x9f/0x2c0 [ 216.390291] default_file_splice_read+0x17c/0x870 [ 216.395139] ? __kmalloc+0x15d/0x7a0 [ 216.398857] ? alloc_pipe_info+0x15c/0x380 [ 216.403098] ? splice_direct_to_actor+0x5d2/0x7b0 [ 216.407948] ? do_splice_direct+0x18d/0x230 [ 216.412280] ? do_syscall_64+0x1e8/0x640 [ 216.416367] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.421738] ? page_cache_pipe_buf_release+0x220/0x220 [ 216.427046] ? trace_hardirqs_on+0x10/0x10 [ 216.431288] ? trace_hardirqs_on+0x10/0x10 [ 216.435532] ? __lock_is_held+0xb6/0x140 [ 216.439620] ? save_trace+0x290/0x290 [ 216.443440] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 216.450115] ? fsnotify+0x11e0/0x11e0 [ 216.454035] ? __inode_security_revalidate+0xd6/0x130 [ 216.459232] ? avc_policy_seqno+0x9/0x20 [ 216.463303] ? selinux_file_permission+0x85/0x480 [ 216.468152] ? security_file_permission+0x89/0x1f0 [ 216.473090] ? rw_verify_area+0xea/0x2b0 [ 216.477157] ? page_cache_pipe_buf_release+0x220/0x220 [ 216.482445] do_splice_to+0x105/0x170 [ 216.486258] splice_direct_to_actor+0x222/0x7b0 [ 216.490940] ? generic_pipe_buf_nosteal+0x10/0x10 [ 216.495789] ? do_splice_to+0x170/0x170 [ 216.499777] ? rw_verify_area+0xea/0x2b0 [ 216.503900] do_splice_direct+0x18d/0x230 [ 216.508093] ? splice_direct_to_actor+0x7b0/0x7b0 [ 216.512950] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 216.517713] ? __sb_start_write+0x153/0x2f0 [ 216.522049] do_sendfile+0x4db/0xbd0 [ 216.525783] ? do_compat_pwritev64+0x140/0x140 [ 216.530374] ? fput+0xd4/0x150 [ 216.533573] SyS_sendfile64+0x102/0x110 [ 216.535147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pig=8459 comm=syz-executor.3 [ 216.537546] ? SyS_sendfile+0x130/0x130 [ 216.537558] ? do_syscall_64+0x53/0x640 [ 216.537569] ? SyS_sendfile+0x130/0x130 [ 216.537581] do_syscall_64+0x1e8/0x640 [ 216.537592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.537609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.537617] RIP: 0033:0x45c429 [ 216.537622] RSP: 002b:00007fa5871d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.537639] RAX: ffffffffffffffda RBX: 00007fa5871d66d4 RCX: 000000000045c429 [ 216.594105] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 216.601379] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 216.608653] R10: 000000000000003d R11: 0000000000000246 R12: 0000000000000008 06:17:20 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000600)="585ccbc4ed8352b511ce474914dc5500b66147b3c7218a91690000000042e3d35228897512f93191b076ac446ff0022b8753a1fa74ff569f435fb3bac76efb74b50ee93c2db8eae3198a29e5c0cfc60000ce0637ce1ff5ff70e48884ca000018cea71fcfacf40d32feb58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xb7, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)}) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) pipe(0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000884) memfd_create(&(0x7f0000000840)='\x9acpuset-:em0ppp1\x00', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000480)={0xa20000, 0x5fa, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909d9, 0x4, [], @ptr=0xffffffff}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880)='/dev/snapshot\x00', 0x434842, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="159300008c0500000000670000000500170900000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x40, r10, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0xce, 0x75, 0x2, {0xc3, "def6cf07565658351ee2792d950e0bc019feebdfd877d4400086236927e92fa6b07932224cf9862e0cdbccc4438d720b77c864b9c2e6450d54e2a96d75a3d60df2778ae71f0daaa9a01fbece0c8606fd35a88e214cb219d80f726b8f0343cb4e2f90990341a4bc21a300e4061904a597c690b465e72b1cd55f828b8ead83c34958d8595731194d0ba3d70390983b588e3363bf68321a2cf8bb7e403ccdb0ebfea22d55efe822b9681d039157baeee5dab5dc7cfeb61abb3579fc00fd4a12d9da17a2d1"}}, 0xce) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f00000004c0)=0x6, 0x4) 06:17:20 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) [ 216.615931] R13: 00000000000008d1 R14: 00000000004cb324 R15: 0000000000000002 [ 216.623477] kauditd_printk_skb: 9 callbacks suppressed [ 216.623484] audit: type=1400 audit(1582525040.440:68): avc: denied { map } for pid=8451 comm="syz-executor.0" path="/dev/ashmem" dev="devtmpfs" ino=17849 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 216.639682] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 216.659820] Modules linked in: [ 216.663029] CPU: 0 PID: 8449 Comm: syz-executor.2 Not tainted 4.14.171-syzkaller #0 [ 216.670858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.680214] task: ffff88808ca10440 task.stack: ffff888054bf8000 [ 216.686281] RIP: 0010:get_unique_tuple+0x230/0x19e0 [ 216.691292] RSP: 0018:ffff888054bfeea0 EFLAGS: 00010246 [ 216.696655] RAX: dffffc0000000000 RBX: ffff888054bff028 RCX: 1ffffffff1165e2c [ 216.703931] RDX: 0000000000000000 RSI: ffffffff8546e852 RDI: ffffffff88b2f160 [ 216.711204] RBP: ffff888054bfefc8 R08: 0000000000000000 R09: ffff88808ca10d30 [ 216.718471] R10: ffff88808ca10d10 R11: ffff88808ca10440 R12: 0000000000000000 [ 216.725860] R13: 0000000000000098 R14: ffff888054bff04e R15: ffff888054bff078 [ 216.733228] FS: 00007f00d5912700(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 216.741452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.747336] CR2: 000000c433e51d0c CR3: 0000000085141000 CR4: 00000000001406f0 [ 216.754610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.761998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.769264] Call Trace: [ 216.771864] ? find_held_lock+0x35/0x130 [ 216.775929] ? nf_ct_invert_tuplepr+0x17d/0x2c0 [ 216.780602] ? nft_ng_random_eval+0x170/0x170 [ 216.785103] ? hash_by_src+0x360/0x360 [ 216.789026] ? lock_downgrade+0x740/0x740 [ 216.793176] ? nf_ct_invert_tuplepr+0x1a4/0x2c0 [ 216.797849] nf_nat_setup_info+0x1bd/0x7f0 [ 216.802087] ? nf_nat_proto_clean+0x1c0/0x1c0 [ 216.806589] ? kmem_cache_alloc+0x12e/0x780 [ 216.810913] ? __nf_conntrack_alloc+0xa2/0x5e0 [ 216.815494] ? nf_conntrack_alloc+0x38/0x50 [ 216.819818] ? netlink_unicast+0x44d/0x650 [ 216.824050] ? netlink_sendmsg+0x7c4/0xc60 [ 216.828372] ? sock_sendmsg+0xce/0x110 [ 216.832260] ? ___sys_sendmsg+0x70a/0x840 [ 216.836405] ? __sys_sendmsg+0xb9/0x140 [ 216.840377] ? SyS_sendmsg+0x2d/0x50 [ 216.844087] ? do_syscall_64+0x1e8/0x640 [ 216.848146] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.853506] ? save_trace+0x290/0x290 [ 216.857307] ? save_trace+0x290/0x290 [ 216.861111] __nf_nat_alloc_null_binding+0x13f/0x180 [ 216.866218] ? nf_nat_setup_info+0x7f0/0x7f0 [ 216.870633] ? __lock_is_held+0xb6/0x140 [ 216.874694] ? check_preemption_disabled+0x3c/0x250 [ 216.879714] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 216.885174] nfnetlink_parse_nat_setup+0x34a/0x3b0 [ 216.890104] ? nft_ng_random_eval+0x170/0x170 [ 216.894602] ? nf_nat_alloc_null_binding+0x50/0x50 [ 216.900495] ? rcu_read_lock_sched_held+0x110/0x130 [ 216.905522] ? __lock_is_held+0xb6/0x140 [ 216.909586] ? check_preemption_disabled+0x3c/0x250 [ 216.914609] ? nf_nat_alloc_null_binding+0x50/0x50 [ 216.919544] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 216.925004] ? nf_nat_alloc_null_binding+0x50/0x50 [ 216.929934] ctnetlink_parse_nat_setup+0x76/0x4a0 [ 216.934781] ctnetlink_create_conntrack+0x468/0x10c0 [ 216.939886] ? queue_work_on+0xfd/0x1d0 [ 216.943867] ? ctnetlink_del_conntrack+0x5e0/0x5e0 [ 216.948798] ? hash_conntrack_raw+0x2c1/0x430 [ 216.953389] ? nf_ct_get_id+0x170/0x170 [ 216.958063] ctnetlink_new_conntrack+0x4af/0xcc0 [ 216.962823] ? ctnetlink_create_conntrack+0x10c0/0x10c0 [ 216.968202] ? ctnetlink_create_conntrack+0x10c0/0x10c0 [ 216.973566] nfnetlink_rcv_msg+0xa08/0xc00 [ 216.977815] netlink_rcv_skb+0x14f/0x3c0 [ 216.981880] ? nfnetlink_bind+0x240/0x240 [ 216.986025] ? netlink_ack+0x9a0/0x9a0 [ 216.989918] ? ns_capable_common+0x12c/0x160 [ 216.994342] ? __netlink_ns_capable+0xe2/0x130 [ 216.998932] nfnetlink_rcv+0x1ab/0x1650 [ 217.002912] ? netlink_deliver_tap+0x93/0x8f0 [ 217.007405] ? find_held_lock+0x35/0x130 [ 217.011469] ? netlink_deliver_tap+0x93/0x8f0 [ 217.015968] ? nfnl_err_del+0x160/0x160 [ 217.019943] ? lock_downgrade+0x740/0x740 [ 217.024119] ? netlink_deliver_tap+0xba/0x8f0 [ 217.028620] netlink_unicast+0x44d/0x650 [ 217.032685] ? netlink_attachskb+0x6a0/0x6a0 [ 217.037096] ? security_netlink_send+0x81/0xb0 [ 217.041683] netlink_sendmsg+0x7c4/0xc60 [ 217.045757] ? netlink_unicast+0x650/0x650 [ 217.050004] ? security_socket_sendmsg+0x89/0xb0 [ 217.054761] ? netlink_unicast+0x650/0x650 [ 217.058999] sock_sendmsg+0xce/0x110 [ 217.062716] ___sys_sendmsg+0x70a/0x840 [ 217.066692] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 217.071454] ? __fget+0x210/0x370 [ 217.074911] ? find_held_lock+0x35/0x130 [ 217.078973] ? __fget+0x210/0x370 [ 217.082436] ? lock_downgrade+0x740/0x740 [ 217.086592] ? __fget+0x237/0x370 [ 217.090046] ? __fget_light+0x172/0x1f0 [ 217.094028] ? __fdget+0x1b/0x20 [ 217.097403] ? sockfd_lookup_light+0xb4/0x160 [ 217.101902] __sys_sendmsg+0xb9/0x140 [ 217.105703] ? SyS_shutdown+0x170/0x170 [ 217.109681] ? put_timespec64+0xb4/0x100 [ 217.113749] ? SyS_clock_gettime+0xf8/0x180 [ 217.118076] SyS_sendmsg+0x2d/0x50 [ 217.121630] ? __sys_sendmsg+0x140/0x140 [ 217.125694] do_syscall_64+0x1e8/0x640 [ 217.129587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.134432] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 217.139615] RIP: 0033:0x45c429 [ 217.142796] RSP: 002b:00007f00d5911c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.150504] RAX: ffffffffffffffda RBX: 00007f00d59126d4 RCX: 000000000045c429 [ 217.157755] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 06:17:21 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000600)="585ccbc4ed8352b511ce474914dc5500b66147b3c7218a91690000000042e3d35228897512f93191b076ac446ff0022b8753a1fa74ff569f435fb3bac76efb74b50ee93c2db8eae3198a29e5c0cfc60000ce0637ce1ff5ff70e48884ca000018cea71fcfacf40d32feb58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xb7, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)}) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) pipe(0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000884) memfd_create(&(0x7f0000000840)='\x9acpuset-:em0ppp1\x00', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000480)={0xa20000, 0x5fa, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909d9, 0x4, [], @ptr=0xffffffff}}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880)='/dev/snapshot\x00', 0x434842, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="159300008c0500000000670000000500170900000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x40, r10, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000008c0)={0xce, 0x75, 0x2, {0xc3, "def6cf07565658351ee2792d950e0bc019feebdfd877d4400086236927e92fa6b07932224cf9862e0cdbccc4438d720b77c864b9c2e6450d54e2a96d75a3d60df2778ae71f0daaa9a01fbece0c8606fd35a88e214cb219d80f726b8f0343cb4e2f90990341a4bc21a300e4061904a597c690b465e72b1cd55f828b8ead83c34958d8595731194d0ba3d70390983b588e3363bf68321a2cf8bb7e403ccdb0ebfea22d55efe822b9681d039157baeee5dab5dc7cfeb61abb3579fc00fd4a12d9da17a2d1"}}, 0xce) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f00000004c0)=0x6, 0x4) 06:17:21 executing program 5 (fault-call:6 fault-nth:3): userfaultfd(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x161842, 0x0) sendfile(r3, r2, 0x0, 0x3d) 06:17:21 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7f, 0x22000) r1 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) setuid(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) write(r5, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) r7 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r7, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa7b99340f23a1d73c267958d4c5320b83", 0x4c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x0) sendfile(r7, r7, &(0x7f0000000200), 0xff8) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0xe0d6}) iopl(0x1f) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x80000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x9) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='Z\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r9, &(0x7f0000000000), 0x3000}]) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000640)={0x9e0000, 0x5d1, 0x0, r7, 0x0, &(0x7f0000000600)={0x990964, 0x662e, [], @p_u32=&(0x7f00000005c0)=0x2}}) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r14, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, 0x0) io_submit(r10, 0x4, &(0x7f00000007c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="76f11c6885121c9ac15993be81882deee0d9e432d08c96cb04b34eeeab422b1d25cb6e3e16042dc14348a121e62f6e6becba981c17050e57d4c6880e4cc3700ae853e4d54d486bbb63aea4b09f924bd16b9054898008572082d2d07120853d0bd7404d392faef4c67f8e8443b298a23c5a8b44ac11a066f0a4946258d9bc39c9350869af1c34dfcab3c1b38365e1498522b486df5556e4ba07a6407355c4862e6a0a1f16f8598352a506bb28610738df30ce75718048b5842119133879957c03", 0xc0, 0x2, 0x0, 0x3, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f00000003c0)="6af2152ef38cdea975738aeb9da7cd706b9c3cecad510976ff201ea3e4f61cca2eea7d38cad4323effaa5716f9bc1a6ad347e8cae6545ddff99b120c6ed9783cc45c95261cd94408efc9ec374c3b71cb20fe5d1b0c45e27597184746d9dbe2bc461c28c647b4a3cb6776932adb8e18b117b7ffdd727567db6b4c2fcae92292b73847d5e2db2da2517d3772bf0cfa1f2ef9abfe29b80d13276ffae0c5a7fda56d6bef48285660723fe082", 0xaa, 0x6, 0x0, 0x3, r11}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x40, r12, &(0x7f0000000540)="80dcdcec7d214436534b91ae294ade35a5f9e48a0877e995cc22b488b6a0c657b2c81f6b7fa6b065eb799fdc0f29fe2737d8c577d07bf2b4a57139a51392cba86835d4", 0x43, 0x1000, 0x0, 0x0, r13}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x1, r14, &(0x7f0000000880)="85da2b09279652d9f4afc89ec6f9e0ad2276eaefa1abf848aceced7265b2d1098aca12a7749758b9157782238bf91deb68163d804ca4bee48850d7324a13179f6323bb871b52d294d237362c815fdd05da45ed81816ae0b2cfa9cb4a3d55f8c37d3481251b08120927049151d52278435a205e1590ed50a8b860932378d5ec96b09cbb9dfb02d62f03e24479de0cd00cb5ce3edcfd7fc61a09d386b89a06d23e3f8d13552d1a3e6b143349f7a94f2a0b14ab44d2fbe8c48b74efea366f54cbdbbaee80218690878049813f38e54cb02d5ad6bdfb55d014b593c1d0c87f45edf6f564", 0xe2, 0x8, 0x0, 0x0, r5}]) r15 = epoll_create1(0x0) r16 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r16, &(0x7f0000000040)) sendmsg$netlink(r11, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[]}], 0x1}, 0x20008001) [ 217.165017] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 217.172284] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 217.179556] R13: 0000000000000959 R14: 00000000004cbc99 R15: 000000000076bf2c [ 217.186833] Code: 48 c1 e9 03 80 3c 11 00 0f 85 91 14 00 00 4a 8b 14 e5 a0 ec b2 88 4c 8d 24 c2 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 81 14 00 00 49 8b 04 24 48 89 85 30 ff ff ff [ 217.206033] RIP: get_unique_tuple+0x230/0x19e0 RSP: ffff888054bfeea0 06:17:21 executing program 4: getpgrp(0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedsend(r1, &(0x7f0000000300)="cb11f00d1b4f8ee7853805b2f2884bdb936c805e85f692b25907265885aedc55957a4740cf0439ce53ba611b2f012fb3de1cc9caf6d4aa2404b1f32a493edde32aeaf3e085b8b82c8d7ae31914d2718007728317482088fcf581d12595c29fd28ecc0e0b88310ab8a833c232d2deed6b9ae7e7908b066382004d0e555a67afcc4ee12376ecda0147cbd150a8c15d7262c1476f111a", 0x95, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x7fff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/184, 0xb8}, {&(0x7f0000002780)=""/120, 0x78}, {&(0x7f0000002800)=""/28, 0x1c}], 0x9}}], 0x1, 0x60002000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x8}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f0000000100)) r7 = epoll_create1(0x0) r8 = socket(0x22, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)) accept4$inet(r8, 0x0, &(0x7f0000000140), 0x80000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000b00), 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) [ 217.265322] FAULT_INJECTION: forcing a failure. [ 217.265322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 217.274074] ---[ end trace 1081dcf7eb901933 ]--- [ 217.286725] Kernel panic - not syncing: Fatal exception [ 217.293295] Kernel Offset: disabled [ 217.296916] Rebooting in 86400 seconds..