76570616765202864656C6574656429 dev="hugetlbfs" ino=47337 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 386.426981] erofs: read_super, device -> /dev/nbd0 11:54:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) [ 386.460073] erofs: options -> (null) [ 386.467084] audit: type=1804 audit(1579953293.261:421): pid=23970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir602102537/syzkaller.WUYvTI/91/bus" dev="sda1" ino=17175 res=1 [ 386.479404] block nbd0: Attempted send on invalid socket [ 386.499666] print_req_error: I/O error, dev nbd0, sector 0 [ 386.522252] erofs: cannot read erofs superblock 11:54:53 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='efivarfs\x00', 0x0, 0x0) 11:54:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:54:53 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) sendmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="6ea37145ed8d90298c97284ed7e15e5077aa0c831f995a68852625902e2ff51d7e9cf9e7617aa4bfd2d3486c711a7b766d55981f8f245de082519eda8f06f096e2f2ad8ee1cee6f19b5dde8d0b7f91f8d804034c810958b86a24cb721fe67e95a54e8877d46da3b773ed1a3c6368fbcd54aa30e6fbc6673c570438786b3fb6fca7a7a2afda6a36a1f279180869c0fd4da4ccd8651c2273d515c8dcb2d9b82a6a1fa1795299d084d9b1d8868fede8728780ab16341a34616a2a9a0b6ddca6f6e9eef0e578747600081c98347594c078fad043477938d42ffd9ad6484409b8a9a2a292328cd73f95b4197999f98825f1106c8b2751", 0xf4}, {&(0x7f00000001c0)="b110c9e9204bb3973dfb906cacec76255dba53a874a428ff71014ae1894b4cebd18a2c23925817d470dddd7726278da0975eee58eff621d8c84feae2f06e59e2e1cc8347d252225ada4b207f510dce57b4fb9884751402f14ea81d2165e8e795a0bd30dc268edf011e4fc8", 0x6b}, {&(0x7f0000000240)="97f2b9f16e8189c899a6d8ec60f5dea7f0c9d61c67200bed022787c1b43da8e2a6fe7d45f95dafefe47b8a9b45105bf091e577b86773623a007571edfb20eb87f92426ba72f0760dd070f29961264c6ca4102213a3454db34dd03a21c1fe6023f1f0d7708893883c9f66f0645ec9876480246b9359f5c87bf0b824f83c3aa2ae06cd6e3ab3f7d7cbb749c36a1d9950c8da03cc13a8b258e38169d1da31570c6e5ff9888133faa553d4f944a8758cf537d89f4250c624c73342e91f0b1b7f9674141d046145a1762a57499d37f89d0abb63d27f5f497be956dc600e113262ae5ec3199dbe118235c97c", 0xe9}], 0x3, &(0x7f0000000380)=[{0xf0, 0x109, 0xf3, "33f760f119620ff378112238e67fb308ec3078c85c4bfe26440078e017ffb0b8bdb72474e64856584bb09ba964d39126687894dc5ad4cccd408680cee3d3edb6e07a5e7c49d4f12ad78381d497f47fe1ccf84d76f148a2f4e0b28f4a85e5105d8b66154121d8fbba105b83102ddfa9b5af1b25e451a7fa268b2e48dba900fec7f39c0e98070ea3f29a2117e4ac615f88783e5cf1d0a157c522dce2361766d18ff5216965e36f32204db4b5a499379f415608e97cf0657240d0ca24238da0d64b49bde8358ded016c38e1bbda853cb887ab3dba635294b76ba312b7daaa"}, {0x60, 0x11, 0xa3, "18ebf8f843040e47edcd9a39839173ca742a66a831cee860b94c94105a2de689b9c34eb2f9d130dda5f9aad3a3ad5cdf4a9b4e5b79d7cadd5c0d553f82738cc7db5e663807f5d29186060f57d6b6af3a"}, {0xd8, 0x10e, 0x1, "b45cace29a25f481185358e8efa72e227b9eaebcd9c07841b1b0be825ee2ea4815557e313ae79aa4fdcc0eadaa0364527536ff7fec84e677ea3039ccacdc36ddd922fa89a0240873423959f0e3437d3854a863ff35d712da7e570e9c5ffde92c5711bc2851e9489655268d73a1ffe8bbca8b30dbd63070c758eae7ebec12902aaa7b50896331a73bacb615dd76b23a2246fe15518190a37515d04db7a940cf36f69ef443be38114d6ad281556378986408c9b94d504d1d2c93ab5127857818c7fef145f2"}, {0x1010, 0x10d, 0x2, "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"}, {0xc0, 0x10f, 0x8, "fb122b7f9ddbd7daa56a63cd4317cb1f1750af10bf8997d7e4db5413841be296d1375d547ee0867603e6f2e124b5dad1b331345a901f899573dc32ab14d4d1194cec21d9b132d33242775247d0f8a0109cdbed923d6bd374c4d7aae01e4fc7ff97c41273c96efce4da3253089a7a3dbf11b527c08ae1a126366024a29e768dd5d65ce6284723e91f8c82bbe40c50242e77793b0ab21d973549d252a22b168296f711426cc30454784311033d"}], 0x12f8}}, {{&(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001700)="ae89c911446756161bc81152677693ebed283108726ffdaf69c35b8a9ab790a2ef073888fdbace80659e7018b721f158666be43e8fcadf7921540d76ce71c52432d2193101f99abf61f7f9961e498bd16a22cdd79da8b340e062d1d663a304db47f3b0bb8f71406da5ad93f1cf1dca29c7b467497401d3592a76a852a4d0faa9701e9431fd7efb29c199b9e4a4f696b283643ebe29109d5d2360760d0ae60c30e142d022f678d2feef6780e3c8ce45237d", 0xb1}, {&(0x7f00000017c0)}], 0x2}}, {{&(0x7f0000001840)=@sco, 0x80, &(0x7f0000001c40)=[{&(0x7f00000018c0)="156eaccd95f517f529d2b81c9ecb6c976cb99ddf819a1d58525c57fb8657e372e5d08b293706fa50f23e656dde5e01aa9b9f5c8768d444b00e077ace1383a3a0c60dfc3a8c7a6cb8c56664743cb649100fb534", 0x53}, {&(0x7f0000001940)="bf7b55fdd466c8cd816e52ca78f291d233c526c76746eb1388eac887b1829f", 0x1f}, {&(0x7f0000001980)="a1e0d2ae4870b2e77421b8a146d8f912c0afa46e503aa8b9832cfdfa268d69e741dcd332faf8d22bc2493ec41af7514cd5916b2be63bbed2a34c4454910dc0e665679c0a0395205898ac64f96de0b6bc99c1a2caef63d3148e69e6e4f6904efda7c40e26d9d7e38a166b7c4a6b1ff76844e06a15d30ef29cc0d2c8245c3369515292372231681d6e79ce53f7d0974b14db7119ea39a44ebee81ee5ab1bae89fd4621d6ab7cf1732553ef9736a9b7b8489f89860cc0a79e0210b427db41eab26bec941d622e633a10d622f0814c", 0xcd}, {&(0x7f0000001a80)="46ff4b5444ea0c70b5aedd6498a849e93d9efc3b77bba9bb85ed95ce69ae95aaa8954ec578311a9104b349f5743adfcf6a3e7c9b0101d619bad7a65bbaaa9897095b9dde4b5cc438054b80f963e4d54554536da919333d5a670df50f3f8ee480030aed2699708cbe19eb", 0x6a}, {&(0x7f0000001b00)="89f401b699edf5c69dcb60c2ab84cd514bdb414b04d8b5c2248779bf0390a38838c02fdeeece18986129f846618217e5f02b0e5e9ebe", 0x36}, {&(0x7f0000001b40)="63b4f5383853e813d23849a7b241787612cee3b38384b4cd74d7f6002628f14f334736", 0x23}, {&(0x7f0000001b80)="6cd16aa53f52196b8f099ef72f07b317a899aab2bfdfdaba50738726a9b82e5560b954156cff009316a6b3cee3528549d2b9bdb05a5314002afda95e8d87815427df94fc6e5e0da5fc683e22df627b7359af9d73bcf6bb9b06e352167423cd16698607e8070090d41c5ba400628fdd80fc6e8ad20ecfab5afa03ac71b8175f0f30ff5ba69f8329b161eefd8a4501860c74d09d9babb8c8a96063444d", 0x9c}], 0x7, &(0x7f0000001cc0)=[{0x108, 0x116, 0x8, "1bdedf8892dd0d196a4e1bc81de0d9084e8894e8742d236184197d211eb32125740bfb9b77a4d77c824a80df825d1e52411aad24445ca9a54fd86ceb31d1b89d174e26fe33fc524a3a60a7cab4d2997c3649b61a2808159174b4da3e930a29be12a8ccf49b27a27d228d0466e11c09cf631e2d6115eba9a8f7965177cd05b39133fd9e9125039975572299f6d614d3a2094374a1ac77e17d3b0a104392764669476c222ce17f52eb72f36f6d8749464a4a272640c50d9621e3ade49492a1378c7a09a6050c5a76ce21cfa6718d0c507bba5eb4b5896b1e6baed977662b31d9be34138294a998abfcfc69a2a6ebd86d9b6e5fb3"}, {0xb8, 0x10c, 0x3, "f43f650a1eca3aa56a2c15c4a9b3cecb9de8e80eace392d2875247f939b85945b8e2dadf68426b8fcfe8cef91c23d8bffcff7ee9ac11471b7108bb51c89ed34c2c7752909b81bb1a539b3889cfdb76d8576b2929d56711797a33dc3f3b1641b7aa993748970b629ef55a616db500df1748cc4d458b68cf843eb0db3d526bf234f9b46af85b658ee32dd19ad306f4f035724ad6f4e7f3d6c978ebad47906b41a8188d4ab5d7272824"}, {0xb8, 0x103, 0xfffff136, "51617dec23561732c287f3d950e842562ef3dcb630cb966dc36e4cf1aa14a0b25e3461ba3023373ba5722123f72f8942073ad23dd7285f34ca7b2c5cd76893a10a16fec08b90f8d800b490d4d5d9903e15b496bfce533176d1f543fb22b72093ed07bbd3b31dacb0b35e9fb9448d0e0e72705284c0d2cb488804a0b2e58651205acb9effe829a0bba701705eed7b74f212ce28e5d859ec73579bf68cda97ddaa1d7e"}, {0xf8, 0x0, 0x8, "8f4b8607085dfaef86939d2b5a03332191b2e7bfdc807f90c156de7aead71f92386e40594126df745cba3325bd31ee50534cf585a67fa9ea8dd320723ff126c2ed0f61251be526d21cc3250def5a20134294c3946cf14f3039c29f64cc51941a9379793e69823d7804fa0eb15a7d13de90c23d6e15a36b1a9d84aec61d0d3bc922de24a8b231d762cdd71252bd2e12ba46c42d3aa32aee7e1c5079e139a2c640c195a3438bbf828968ea327e0066604afbdb1ffc00d103234ab8a27c37c608722dd0752c5e269f477e8af583c31d3ebfaf1b73a341c398de8ebe329a493173bade5ee7f809e5ca"}, {0x80, 0x88, 0x9, "0ccc4d2fad1578eddda39234261c4cda5c96f861184f87ab964642f5921951d0785933ea9b2f8241ce8cd6e4b349ec036c925002480f4f798f4ffa9ec3961c91b757ed6a8841517c170cfcc4907e1ac7a5dd9107619afd85c55def4eb6ca7e2e1739368d2d5fa005f90260233012ca"}, {0x68, 0x114, 0x800, "65ab69dce7e0be04a639077c29df37611d4db20d93fbbb98d3a48799eb3858b4bb0e42ad13f9d30c9b88fb504d7b1ea2befed62a4791790561cc4f1faacc428ce2490c81a8583232e5dc20ff768c404ab1c2ee5324"}, {0x98, 0x1, 0x2, "38e9fa345564d7e516debd5a0101aead2dbf699060e3a64afde549fe6a1c65e791ce14aca017b5c77a9a13fcc8b3022af529ccfb375344e65d8b4462ac38bb30d508051c5f47fd13b78b4e1f0b5b5fb3f3f3a8f1b90a150568425d0b820602a0571f6cb8e99fe8f3e3705c14ae4f61b8efb545c4077a7f32ccdf7c5669365571f9701c2c"}, {0x18, 0x0, 0x7, "203d029d59cab5"}, {0x70, 0x116, 0x3, "645752a47d9438badc1f5e519b69151b2c843ea24b283aff2a86ad63365d05f5920b9e055a898061187d8e146c0baa97a5e2d030bc741eeef1c25b181472880efdde1219bf0b25e6f6b0fc89e149300ede76649ffa21969bb5235525fa"}], 0x578}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002240)="7e1561bad905bf4962658841a14524c3573489809748b61f28d814016b5bd124d62410e0ee27d4c81aba9547203494546e35baf8523a1d9d64b2e5812a5b8a17f6127241e62e8f68ac64da38689b11784930bd2a71dd2b969e9551e277103168a0d47eb8472cda3c9940389cea899327964887e1fcc93b4f8b494bb284375cc4341347cc6279f5f54347dae7a5208c6907d13d9a9ed28cac8bb1c761fcb25653", 0xa0}, {&(0x7f0000002300)="e809ddc3095db4c0790811ad4455100fe43a02ec6ed7e1ea63b3dec2a0d059a215a4886c", 0x24}, {&(0x7f0000002340)="4359ca86112565ab371a87c2b27a14dac9fbf94d6f61ff47f5aaac1b5163611116d3ab3e10a9be929d67c5b487f58723129f95ba47534b80b9263dd5bd9f7e0432e65be97ad3337ad0fa8d7e8d58349abd3cfdb088d1d75108961c2043076ca3f6b6bf6932fc6b689d1541ba76f472e7fc2229694015fdc667edde", 0x7b}, {&(0x7f00000023c0)="13f0f33033ed49dd3b42d6d49416f3704127e8132162d067dd2115d4", 0x1c}, {&(0x7f0000002400)="2c984c437ea1e0a1914b461f7b9e902a4558ff28ca6afe36333e4c0f027c0fc503028d7440dc5032931878f9a458a6dba12dff78aff0ab", 0x37}, {&(0x7f0000002440)="05e5f426edf29707ea65ba54a5a40f5e83d78c2a67e8460f6055189875c996e43e03f35597169bbd399ada19f9a3ca1b4f8c6ff421dfd50e80ed3cc9e7b286cc07e8f156aca2cefa32e1ea38fcebc92bb466373e33383797033673370390b42653cb5743e413d990f0392dcb1af8ea9e74bab851c48321d6dc0a27796787802dbcfa32130b0ca2c5404555e1e080b88e4b6ff688de7b5c1bdf2b05b49e7b4bbc778d840cf2b700d6bc170b01a0cee0101f", 0xb1}, {&(0x7f0000002500)="01838017982f8ef8f98dc8f39dfcb0da545f55d6c9698a594626279c67a1ad1cbf4e5f04ac4eaed9730578b55c260ea373584500ee4748ffff53a468f945613c99ac2ab6e80f9f9c676728a68bbae0d2e80e88050837e04a0224861c6e2f57d15284912d59cddccb860e44e4dd3b1eb904a3828648fc3fa12b9d60de6c1fffbd90e7a2e409ec1e1176bdd7dd621ceee9e916221de967935c5650b9570aa287c4e2592e", 0xa3}, {&(0x7f00000025c0)="de9d8f50599b4f9c7014023d96ec587d3f84e548e6c5363805593053ebba7b54ed0b8ebbc94341895e41bd9cad9d1935d4ad8a8dec2c64d782f4c685207c8e3b3fa351417f0084f61b12d942dd6d32b2d743c4483add59de523893e83e23e85badc548f31a60c9459bd860a00184497e8a7873ccc142c4978a2e68ac94f09406673ae218fd78a4fdbdcd60c6ba03fb630e180b70", 0x94}], 0x8, &(0x7f0000002700)=[{0x80, 0x112, 0x4, "b24015506bd0e7238f98b6bf1ba918428ce644a36a7c604ff6c55850b0ee1c59431a6901a732433786097e1cde71d76ebd6c17598a0458daaee349fc82af13673ed85edcadee6e9c0e8294e9305949c86f4409d650d6067495c58b44229598583e994201bf3dffc974b77a6019e47ce8"}, {0x58, 0x1d605e413ad47060, 0x4b, "4df6427016b44e7c2c24c92a8d9d70cb112454566ee6af58d619cfb07e802092ab2e8a56ffbb5f105af415562d2f979480535e79743b8e1a6d3466bc344f4a11dae1a3a5eadbd479"}, {0x30, 0x2b, 0x1, "82965f5b8176de8f71f7f2fff4f97d3df6aa953b0a71d435e9e8"}, {0xd0, 0x102, 0xfffffffd, "e29a2e0017ad93572ce86ed77e5b801a3d87440812118020266fc8d48a251218cd574a38113b19ae3840672c3aa3561b2e1a1a7876a06942056848df5ff7d46982c92c20b1e2c2e4cdb6b112fc4d072949ebc9f71367917cc7d5f24fab35bbad4ad23ff8e52fd76caf610bb7d95da44e914d5a75e25a621f5f70ee94d11bf948a7b9e6c1476e9285838b189095cb7b7fcf95f382124152ae5b9844c8e71e8412af1a107367e4a486353835be99689743b094951db3550b196864969d"}, {0xe0, 0x113, 0x1400000, "d6d1368ce1fd335ee32acf23bb3fa5c6ae0a528a3827f4834b21b5838876d31779c353fc091e9014631e817fec215e54c0ea711a5b870010748c39883b9b2b3f04ad5edf262a144c0644dcf5cd3485c6c0101143bf3e26e2f2ce5a049a80efb464aceac6149d17d6d5b08407daf1fcd7f15ba350ea0bc32081b358b867baaa6606acbfbd8f6c7e2c3a38bc5233c520281adb16b5d25546fc39aa537ce1e897bd16df43eb7ac8f4eb8184cb747ad72cc15aad9fb5f5fe7f6ab4b8fdc464c791b3261ada9915261991557eb486ec1087e4"}, {0xd0, 0x112, 0x6, "eaa02e5b4907e0d769b36e420964d9e2aced7bd70c3faa535ff3db65452dee5c4c980dd9a5635f12d289e9def9bfd0c157a33ac3289997aece7ed9d73fa47497784c4fdf08cf544b7b1e9b5d7b4af131d10d5aa1468495f9e3e6a837a9e6131e7e92d9e036b482ef82059bafe67a85b01a54f56f01e87453f86fba07ceba37e21956645bdd35e9f75d7ebcee9b3c09ba8d8d97289b714bc4086c3cf22c88cdc7b07901582ff3828696adc2bf41ac09c86ef25fb1a345eba3f67ca0299b7e44e7"}, {0x48, 0x10c, 0x8, "f3599a4f0e4b2a73a350b06b473bf15cb9d2122dfdbd9e7aadbb3e58fcfe04bae40f18f8e054223fc9cd0f70131dee431c"}, {0xb0, 0x1, 0x0, "e04046a25f63cb76bcc2516767044e99b3159316fd4082014909b9199ddce2c31807f8ad8429c0ba0f48bf6cf77dc73a347b0b1b31a3c5ba063f53dd27c6dbb92f632a4e4d6fcac2b6b6ea27a7e824d0b672cf8dceb66deeb2d5d6574393d7051efd9026963ccdc799692a98fb3d77d3cf91774719dd962390893b010ab240d8b9abe0d96ded66b1e50705d4950a228b403c8195a5b171e65ebe"}, {0x18, 0x104, 0x5, "8fa74f469c9a5f"}, {0xc8, 0x3a, 0x9, "394250a98e8bf1a7f34a821da6b475a2c321dd994804e2f409b8b91b6f193b8c1d694fc5f492051418320206f9d0a9e7de82c5796caa9330b49f4fefc6a7309aab380c8afa7433161dd3db7db09a0c8d71ff89745e74cadc75f7f618f8a65f0420103f334fffc16478f7000ddff22c0486157e34f0c99e3d71b7bdedab049374730d0c24338831ed540f1420424a341a39bac53fedaeaacef9a878a250cc192582a1561983f1f004a820253ed0d71a47d15ec3512f50"}], 0x560}}], 0x4, 0x2004c000) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="555550d96ae489aaeeb934daf50286e97ed44f7644e4039c11989a85a9e984e2bbb6c386fb2f32b60aad"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 386.873378] audit: type=1804 audit(1579953293.741:422): pid=24194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/191/bus" dev="sda1" ino=17177 res=1 [ 386.962147] audit: type=1804 audit(1579953293.831:423): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/65/bus" dev="sda1" ino=17176 res=1 [ 387.036988] audit: type=1804 audit(1579953293.861:424): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/65/bus" dev="sda1" ino=17176 res=1 [ 387.065686] audit: type=1804 audit(1579953293.871:425): pid=24207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/65/bus" dev="sda1" ino=17176 res=1 [ 387.182177] audit: type=1804 audit(1579953294.051:426): pid=23977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir602102537/syzkaller.WUYvTI/91/bus" dev="sda1" ino=17175 res=1 [ 387.208654] audit: type=1804 audit(1579953294.061:427): pid=23977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir602102537/syzkaller.WUYvTI/91/bus" dev="sda1" ino=17175 res=1 11:54:55 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000015) 11:54:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:54:55 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1210000, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x14a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ftruncate(r2, 0x9) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) sendfile(r1, r3, 0x0, 0xffffffff) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x312, 0x15, 0x66, 0x80, 0x7, @dev={[], 0x3b}}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000100)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000240)={0x5, 0x1f, {0x57, 0x3, 0x2, {0x81, 0xfe00}, {0x6, 0x9b}, @rumble={0xf2, 0x8001}}, {0x52, 0x6, 0x7, {0x1, 0x6}, {0x4073, 0x100}, @const={0x6, {0x800, 0x3f, 0x7, 0x5}}}}) 11:54:55 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x101082, 0x41) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:54:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000006f, 0x12, &(0x7f00000001c0)={0x77359400}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) pread64(r1, &(0x7f0000000000)=""/226, 0xe2, 0x1000) [ 389.096430] audit: type=1804 audit(1579953295.961:428): pid=24315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/192/bus" dev="sda1" ino=17189 res=1 [ 389.184811] FAT-fs (loop3): Unrecognized mount option "" or missing value 11:54:56 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2e0081, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 389.404838] erofs: read_super, device -> /dev/nbd0 [ 389.410713] erofs: options -> (null) [ 389.414814] block nbd0: Attempted send on invalid socket [ 389.420473] print_req_error: I/O error, dev nbd0, sector 0 [ 389.427693] erofs: cannot read erofs superblock 11:54:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:54:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xfff7, "4bae65", 0xdc, 0x81}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "03007329bf"}, 0x9) 11:54:56 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f4c65762f6e62643000d7079ad58f763e00d16258f730b826982a93e0671d365097bfe36e18a4af87e0de899e5644ea9278e6ce85f8e1876df5dbbdd0"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:56 executing program 5: chroot(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmdt(r2) shmdt(r2) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0xffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x24004004) fdatasync(r4) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000100)={0x8, 0x80, &(0x7f0000000340), {0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1fa}}) io_setup(0x1ff, &(0x7f00000003c0)=0x0) write$P9_RMKDIR(r8, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x40, 0x1, 0x4}}, 0x14) fcntl$setstatus(r8, 0x4, 0x44800) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0xfff0, r3}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb190f9b81ae2e831, &(0x7f0000000280), 0x0) 11:54:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f00000000000000000e30000000000000000000032000040ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072520850002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000100000000000000fe8000000000000000000000000000aa"], 0x154}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x48080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000380)=0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x500, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r9) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000001c0)) 11:54:56 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000015) 11:54:56 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10400, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0xba, 0x43}) 11:54:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) dup(0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xbe, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3}, 0x0, 0x0, &(0x7f0000000580)={0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(0xffffffffffffffff) 11:54:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:54:57 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x2) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:54:57 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file1\x00', 0x94) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x1, 0x5, 0x1, 0x82, 0x101, 0x6}, 0x9c) sendfile(r2, r3, 0x0, 0xffffffff) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)={0x4, 0x0, [{0x80000008, 0x8, 0x8, 0xfa, 0x7a19}, {0xc0000001, 0x4, 0xfffffffa, 0x0, 0x6}, {0xb, 0x400, 0x95, 0x4, 0x7fffffff}, {0x1, 0x6, 0x5e7, 0x5, 0x8}]}) r7 = open(&(0x7f0000000240)='./bus\x00', 0x82800, 0x0) rmdir(&(0x7f0000000000)='./file0/file0\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x20000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in6=@loopback, 0x4e21, 0x9, 0x4e24, 0x3ff, 0x2, 0x20, 0x100, 0x0, r11, 0xee00}, {0x3, 0x18a79716, 0x5, 0x7, 0x3f5, 0x400, 0x7, 0x8}, {0x8, 0x81, 0xa4e, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x0, 0x2, 0xe, 0x3, 0x8, 0x2}}, 0xe8) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0/file0\x00') r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r13 = socket$inet6(0xa, 0x3, 0xc8) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) renameat2(r12, &(0x7f0000000100)='./file0/file0\x00', r12, &(0x7f0000000200)='./file0\x00', 0x2) 11:54:57 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xffffffffffffffe1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c40)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_dev$vcsn(0x0, 0x0, 0x4000) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20000200000000, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() getpid() ptrace$pokeuser(0x6, r1, 0x388, 0xb8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='dax\x00', 0x2000000, &(0x7f0000000280)) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) bind$can_raw(r0, &(0x7f0000000300)={0x1d, r5}, 0x10) 11:54:57 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x3, 0x2, 0x9) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/18, 0x12}], 0x1, &(0x7f0000000200)=""/227, 0xe3}, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'erofs\x00'}, &(0x7f0000000640)=""/4096, 0x1000) mount(&(0x7f0000000600)=ANY=[@ANYBLOB='/dev/nd0\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:54:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20400, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="00010000160001008060000000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="58b329c7fce9b79a4e7982945c98d0f010754603b441572e95cfb0bc97ce4f393d7a83fc704dc4596be4c29df78b50fc2ba6ac316a7164efce009f0dbe25"], 0x100}}, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) 11:54:57 executing program 5: syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) sendfile(r0, r2, 0x0, 0xffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x500c0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x2000}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x8, 0x200]) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0xe00) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000100)=0x400, 0x4) 11:54:57 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x5c, @remote, 0x4e24, 0x0, 'lblc\x00', 0x8, 0x0, 0x7c}, {@broadcast, 0x4e21, 0x2000, 0x34b, 0x9, 0x53}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x21, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'fo\x00', 0x20, 0x7, 0x38}, {@empty, 0x4e20, 0x1, 0x800, 0x8, 0xc4}}, 0x44) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:57 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000015) [ 390.853371] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 11:54:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4ecb21bbe6073dcf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x100000001]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r5 = dup3(r4, r3, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x2e3d, 0x1f, 0x9, 0x2}, {0xfa78, 0x2, 0x81, 0x100}, {0x100, 0x1, 0x5, 0x9}, {0xfff, 0x80, 0x9}]}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:54:58 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0/file0\x00', 0x40, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0xfffffe21, 0x8, 0x4, 0x1000, 0x1c0, {r2, r3/1000+10000}, {0x5, 0x1, 0x40, 0x4, 0x0, 0x3f, "cf568eb7"}, 0x4, 0x4, @planes=&(0x7f0000000100)={0x4, 0x0, @userptr=0x3ff, 0x2}, 0x20, 0x0, r4}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000001c0)=0xfffffff9) [ 391.313326] erofs: read_super, device -> /dev/nbd0 [ 391.333112] erofs: options -> (null) [ 391.352131] block nbd0: Attempted send on invalid socket [ 391.357791] print_req_error: I/O error, dev nbd0, sector 0 [ 391.364722] erofs: cannot read erofs superblock 11:54:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:54:58 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 391.605974] erofs: read_super, device -> /dev/nbd0 [ 391.627250] erofs: options -> (null) [ 391.636176] block nbd0: Attempted send on invalid socket [ 391.641854] print_req_error: I/O error, dev nbd0, sector 0 [ 391.647742] erofs: cannot read erofs superblock 11:54:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) [ 391.683749] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 391.756234] kauditd_printk_skb: 9 callbacks suppressed [ 391.756252] audit: type=1804 audit(1579953298.621:438): pid=25037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir602102537/syzkaller.WUYvTI/94/bus" dev="sda1" ino=17185 res=1 11:54:58 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:54:58 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 11:54:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) [ 391.968108] erofs: read_super, device -> /dev/nbd0 [ 391.997946] erofs: options -> (null) [ 392.007800] audit: type=1804 audit(1579953298.881:439): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir602102537/syzkaller.WUYvTI/94/bus" dev="sda1" ino=17185 res=1 [ 392.045040] block nbd0: Attempted send on invalid socket [ 392.050779] print_req_error: I/O error, dev nbd0, sector 0 [ 392.059305] erofs: cannot read erofs superblock 11:54:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:54:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4ecb21bbe6073dcf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x100000001]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r5 = dup3(r4, r3, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x2e3d, 0x1f, 0x9, 0x2}, {0xfa78, 0x2, 0x81, 0x100}, {0x100, 0x1, 0x5, 0x9}, {0xfff, 0x80, 0x9}]}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:54:59 executing program 0: mknod$loop(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x30) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200500, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000200)={0x20, 0x0, 0x5, {0x0, 0xb}}, 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb58016b6d5463d77863bcdad3005ee9db6ee49f6d9bcb1273bb7ddf563391efd062ebac39c02f0300000000000000a2c1291acb036d1260b46a5ccd6f2d091ddaaf4815d9746ea4b01593e0d01df68add8da7db000000"], 0x58, 0x3) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x8000, 0x0) 11:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:54:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:54:59 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x648000, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x12, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2b7a82b85871782b222f3b37b3af"], &(0x7f0000000000)='./file1\x00', &(0x7f0000004e40)='jffs2\x00', 0x1264008, 0x0) 11:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:54:59 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 11:54:59 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 392.980797] erofs: read_super, device -> /dev/nbd0 [ 392.990966] erofs: options -> (null) [ 392.996521] block nbd0: Attempted send on invalid socket [ 393.002201] print_req_error: I/O error, dev nbd0, sector 0 [ 393.017393] erofs: cannot read erofs superblock [ 394.574515] IPVS: ftp: loaded support on port[0] = 21 [ 394.632697] chnl_net:caif_netlink_parms(): no params data found [ 394.660596] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.667004] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.674456] device bridge_slave_0 entered promiscuous mode [ 394.682138] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.688681] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.695751] device bridge_slave_1 entered promiscuous mode [ 394.711888] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 394.721021] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 394.736241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 394.744872] team0: Port device team_slave_0 added [ 394.750712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 394.759088] team0: Port device team_slave_1 added [ 394.772789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.779109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.804424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.815769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.822179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.847538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.858738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 394.866288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 394.920332] device hsr_slave_0 entered promiscuous mode [ 394.960886] device hsr_slave_1 entered promiscuous mode [ 394.998350] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 395.005722] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 395.065168] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.071566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.078223] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.084560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.123953] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 395.130457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.139613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 395.149604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.156859] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.164488] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.171973] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 395.182534] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 395.189002] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.198332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.205922] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.212317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.223664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.231406] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.237796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.254299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.262306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.279816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.287902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.295353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.303984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 395.310185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.324772] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 395.333045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.340023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.355258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.401558] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 395.414823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.455802] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 395.463225] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 395.470230] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 395.480032] NOHZ: local_softirq_pending 08 [ 395.484944] device veth0_vlan entered promiscuous mode [ 395.491372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.498963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.506209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.517626] device veth1_vlan entered promiscuous mode [ 395.523703] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 395.532577] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 395.546509] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 395.556441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 395.564179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 395.572235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.582288] device veth0_macvtap entered promiscuous mode [ 395.589059] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 395.597786] device veth1_macvtap entered promiscuous mode [ 395.606501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 395.616321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 395.626136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.636351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.645566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.655995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.665278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.675861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.685097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.694886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.704071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.713839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.723208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 395.733019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.743615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.751128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.760327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.769857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.780383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.789754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.800102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.809293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.819060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.828452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.838477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.847714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.857469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.866571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 395.876338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.887858] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 395.894776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.902085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.910306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) dup3(r3, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x213) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0xa3b474bba5587f17, 0xb64fe9addd744215}}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r6 = socket(0x0, 0x803, 0xff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r6, r5, 0x0, 0x72439a6b) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$TCXONC(r7, 0x540a, 0x818) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) io_setup(0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) 11:55:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000002c0)=r0, 0x4) write$input_event(r0, &(0x7f0000000640)={{}, 0x0, 0x800, 0x3f}, 0x18) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280)) timer_create(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x60, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f0000000880)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000200)={&(0x7f0000000100)=[0x200, 0x7], 0x2, 0x6, 0x8, 0x7f, 0x4, 0x5, 0x0, {0x40, 0x6, 0x3f, 0x2, 0x57, 0x20, 0xffff, 0x0, 0x9, 0x9, 0x7ff, 0x2, 0x1ff, 0x0, "cf1cf1d841876f2b5e07c307bb3adc4f22719d50d28b86e0caa9dbbf3ab46ebb"}}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:55:02 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 11:55:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:03 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0xffff) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x0, @raw_data="ead5720a20bdbb27c40c41fa752bb7ee7a24df84eba11cf616f944f9fbb722457730e295f981713a80800bb60a1f358e3b8240a7fa5afa8a4a74a2a007da4ec9d23cf00abfcc2f90519c67d7165895be93d2652ced7848d079b2bc2ca7bdebe7d14dea22acb98fad486ed582c6bc7120b22b233848d874badfd57991a145098867458731c47ab9f2ee2656e8088a86fa1f2654198ec9d68b69a9a79a04d13e2e0000006f211b315c125c4ee369618eac8b162c4c51627978cdfd5ec05a637c4e0c472ecd8c5f31ad"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x0, 0x1}, 0xfffffdb3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x2}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x8) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000340)={0x0, 0x9, 0x0, [], &(0x7f0000000200)}) socket(0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 396.256535] serio: Serial port pts0 11:55:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 396.451115] audit: type=1804 audit(1579953303.321:440): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/72/bus" dev="sda1" ino=17202 res=1 [ 396.621630] IPVS: ftp: loaded support on port[0] = 21 11:55:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 396.675275] audit: type=1804 audit(1579953303.541:441): pid=25979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/1/bus" dev="sda1" ino=17208 res=1 11:55:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:03 executing program 4 (fault-call:3 fault-nth:0): r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 396.951702] audit: type=1804 audit(1579953303.821:442): pid=25899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/1/bus" dev="sda1" ino=17208 res=1 [ 397.042652] FAULT_INJECTION: forcing a failure. [ 397.042652] name failslab, interval 1, probability 0, space 0, times 0 [ 397.084682] CPU: 1 PID: 26009 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 397.092625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.101988] Call Trace: [ 397.104595] dump_stack+0x197/0x210 [ 397.108255] should_fail.cold+0xa/0x1b [ 397.112169] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 397.117295] ? lock_downgrade+0x880/0x880 [ 397.121473] __should_failslab+0x121/0x190 [ 397.125730] should_failslab+0x9/0x14 [ 397.129550] kmem_cache_alloc+0x2ae/0x700 [ 397.133729] locks_alloc_lock+0x1d/0x170 [ 397.137808] __x64_sys_flock+0x1c0/0x660 [ 397.141888] do_syscall_64+0xfd/0x620 [ 397.145705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.150903] RIP: 0033:0x45b349 [ 397.154110] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.173028] RSP: 002b:00007f537ab83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 397.180773] RAX: ffffffffffffffda RBX: 00007f537ab846d4 RCX: 000000000045b349 [ 397.188073] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 397.195364] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.202647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 397.209932] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000000 11:55:04 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) dup3(r3, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x213) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0xa3b474bba5587f17, 0xb64fe9addd744215}}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r6 = socket(0x0, 0x803, 0xff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r6, r5, 0x0, 0x72439a6b) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$TCXONC(r7, 0x540a, 0x818) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) io_setup(0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) 11:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 397.393834] audit: type=1804 audit(1579953304.261:443): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/72/bus" dev="sda1" ino=17202 res=1 11:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 397.546873] audit: type=1804 audit(1579953304.291:444): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/72/bus" dev="sda1" ino=17202 res=1 [ 397.595881] serio: Serial port pts0 [ 397.628562] IPVS: ftp: loaded support on port[0] = 21 11:55:04 executing program 4 (fault-call:3 fault-nth:1): r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 397.900492] FAULT_INJECTION: forcing a failure. [ 397.900492] name failslab, interval 1, probability 0, space 0, times 0 [ 397.984470] CPU: 1 PID: 26040 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 397.992320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.001693] Call Trace: [ 398.004344] dump_stack+0x197/0x210 [ 398.008025] should_fail.cold+0xa/0x1b [ 398.011948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 398.017073] ? lock_downgrade+0x880/0x880 [ 398.021287] __should_failslab+0x121/0x190 [ 398.025560] should_failslab+0x9/0x14 [ 398.029378] kmem_cache_alloc+0x2ae/0x700 [ 398.033552] locks_alloc_lock+0x1d/0x170 [ 398.037636] flock_lock_inode+0x171/0xdc0 [ 398.041830] ? trace_event_raw_event_generic_add_lease+0x710/0x710 [ 398.043048] audit: type=1804 audit(1579953304.911:445): pid=26032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/2/bus" dev="sda1" ino=17220 res=1 [ 398.048166] ? __might_sleep+0x95/0x190 [ 398.048190] locks_lock_inode_wait+0x114/0x3e0 [ 398.048210] ? locks_mandatory_area+0x470/0x470 [ 398.048224] ? __lockdep_init_map+0x10c/0x5b0 [ 398.048240] ? rcu_read_lock_sched_held+0x110/0x130 [ 398.048326] ? selinux_file_lock+0x4f/0x60 [ 398.048349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.107665] __x64_sys_flock+0x588/0x660 [ 398.111763] do_syscall_64+0xfd/0x620 [ 398.115587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.120791] RIP: 0033:0x45b349 [ 398.124002] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.142921] RSP: 002b:00007f537ab83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 398.150655] RAX: ffffffffffffffda RBX: 00007f537ab846d4 RCX: 000000000045b349 [ 398.157946] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 398.165234] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.172537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 398.179823] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000001 11:55:08 executing program 3: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = socket(0x5, 0x2, 0x10000000000002) connect(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) connect(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_virt_wifi\x00'}}, 0x80) socket(0x0, 0x2, 0x10000000000002) socket(0x0, 0x0, 0x0) socket(0x2000000000000021, 0x0, 0x10000000000002) r2 = socket(0x2000000000000021, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) connect(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) socket(0x2000000000000021, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/47, 0x1}) socket(0x0, 0x0, 0x10000000000002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 11:55:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:08 executing program 4 (fault-call:3 fault-nth:2): r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) dup3(r3, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x213) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0xa3b474bba5587f17, 0xb64fe9addd744215}}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r6 = socket(0x0, 0x803, 0xff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r6, r5, 0x0, 0x72439a6b) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$TCXONC(r7, 0x540a, 0x818) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) io_setup(0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) 11:55:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 401.598036] FAULT_INJECTION: forcing a failure. [ 401.598036] name failslab, interval 1, probability 0, space 0, times 0 [ 401.679837] CPU: 1 PID: 26069 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 401.687715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.697165] Call Trace: [ 401.699780] dump_stack+0x197/0x210 [ 401.703433] should_fail.cold+0xa/0x1b [ 401.707346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.712468] ? lock_downgrade+0x880/0x880 [ 401.716756] __should_failslab+0x121/0x190 [ 401.721014] should_failslab+0x9/0x14 [ 401.724831] kmem_cache_alloc+0x2ae/0x700 [ 401.728995] ? exit_to_usermode_loop+0x43/0x2c0 [ 401.733691] locks_alloc_lock+0x1d/0x170 [ 401.737807] __x64_sys_flock+0x1c0/0x660 [ 401.741883] do_syscall_64+0xfd/0x620 [ 401.745703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.750899] RIP: 0033:0x45b349 [ 401.754106] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.773015] RSP: 002b:00007f537ab83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 401.780729] RAX: ffffffffffffffda RBX: 00007f537ab846d4 RCX: 000000000045b349 [ 401.787999] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 401.795267] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 401.802535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 401.809804] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000002 11:55:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:09 executing program 4 (fault-call:3 fault-nth:3): r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 402.514355] audit: type=1804 audit(1579953309.241:446): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/3/bus" dev="sda1" ino=17229 res=1 11:55:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 402.669239] FAULT_INJECTION: forcing a failure. [ 402.669239] name failslab, interval 1, probability 0, space 0, times 0 [ 402.697248] CPU: 1 PID: 26118 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 402.705087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.714453] Call Trace: [ 402.717062] dump_stack+0x197/0x210 [ 402.720713] should_fail.cold+0xa/0x1b [ 402.724628] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 402.729752] ? lock_downgrade+0x880/0x880 [ 402.733931] __should_failslab+0x121/0x190 [ 402.738181] should_failslab+0x9/0x14 [ 402.741999] kmem_cache_alloc+0x2ae/0x700 [ 402.746170] locks_alloc_lock+0x1d/0x170 [ 402.750249] flock_lock_inode+0x171/0xdc0 [ 402.754419] ? trace_event_raw_event_generic_add_lease+0x710/0x710 [ 402.760759] ? __might_sleep+0x95/0x190 [ 402.764756] locks_lock_inode_wait+0x114/0x3e0 [ 402.769364] ? locks_mandatory_area+0x470/0x470 [ 402.774042] ? __lockdep_init_map+0x10c/0x5b0 [ 402.778550] ? rcu_read_lock_sched_held+0x110/0x130 [ 402.783589] ? selinux_file_lock+0x4f/0x60 [ 402.787835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.793393] __x64_sys_flock+0x588/0x660 [ 402.797475] do_syscall_64+0xfd/0x620 [ 402.801292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.806490] RIP: 0033:0x45b349 [ 402.809692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.828603] RSP: 002b:00007f537ab83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 402.836322] RAX: ffffffffffffffda RBX: 00007f537ab846d4 RCX: 000000000045b349 [ 402.843691] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 402.850971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.858250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 402.865529] R13: 00000000000000c6 R14: 00000000004c201c R15: 0000000000000003 11:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) dup3(r3, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x213) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0xa3b474bba5587f17, 0xb64fe9addd744215}}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r6 = socket(0x0, 0x803, 0xff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r6, r5, 0x0, 0x72439a6b) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$TCXONC(r7, 0x540a, 0x818) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) io_setup(0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) 11:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:10 executing program 4 (fault-call:3 fault-nth:4): r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:10 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:10 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x8) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:10 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) flock(r0, 0x4f26bcf88be88975) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0xffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) preadv(r2, &(0x7f00000017c0), 0x333, 0x0) 11:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 404.147803] audit: type=1804 audit(1579953311.011:447): pid=26146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/4/bus" dev="sda1" ino=17211 res=1 11:55:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) dup3(r3, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x213) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0xa3b474bba5587f17, 0xb64fe9addd744215}}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r6 = socket(0x0, 0x803, 0xff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r6, r5, 0x0, 0x72439a6b) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$TCXONC(r7, 0x540a, 0x818) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) io_setup(0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) epoll_create1(0x0) 11:55:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:11 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) flock(r2, 0x7) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0xfffffe6b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0xffffffff) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r14}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000180)={r14, 0x7, 0x800, 0x1, 0x7e, 0xfffffeff}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4ea16d01ca75a04da3024b28004f1d7e6ed67edbea4c85a8bdbabb0dae6ff5ffb1c05d2a9228db421fe34f0669e6faf6db4784f2c2a7c1a99ce71555836be1fdc1f36da8574d221f969358b89c9b1263e2cce7ebea599eab897252952af2e7fdbad0d17145cd87c155fb6c6b472b", 0x6e) getsockopt$inet6_tcp_buf(r9, 0x6, 0xe, &(0x7f0000000000)=""/195, &(0x7f0000000100)=0xc3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 11:55:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 404.403280] audit: type=1804 audit(1579953311.271:448): pid=26185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/75/bus" dev="sda1" ino=17253 res=1 [ 404.500772] audit: type=1804 audit(1579953311.331:449): pid=26188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/136/bus" dev="sda1" ino=17211 res=1 11:55:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 404.620002] audit: type=1804 audit(1579953311.491:450): pid=26192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/136/bus" dev="sda1" ino=17211 res=1 11:55:11 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000000)) 11:55:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 405.200388] audit: type=1804 audit(1579953312.071:451): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/5/bus" dev="sda1" ino=17260 res=1 11:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 405.354379] audit: type=1804 audit(1579953312.171:452): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/75/bus" dev="sda1" ino=17253 res=1 [ 405.557236] audit: type=1804 audit(1579953312.171:453): pid=26224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/75/bus" dev="sda1" ino=17253 res=1 11:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) fcntl$getflags(r0, 0x408) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x282082, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80100, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250300000005000300080000000500020002000000"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4000003) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 11:55:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:12 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @local}}}, 0x90) r1 = epoll_create1(0x0) flock(r1, 0x1) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x75, [], 0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/117}, &(0x7f0000000200)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x1, 0x3, 0x7ff}, 0x3}, 0x20, 0x1, 0x0) dup2(r1, r2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 11:55:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:13 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x13, r5, 0x1f7cf000) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r5, r7, 0x0, 0xffffffff) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6900) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8400fffffffa) sendfile(r8, r9, 0x0, 0xffffffff) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r7, 0x40086425, &(0x7f0000000100)={r10, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r11, r12+30000000}, {0x0, 0x9}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) tkill(0x0, 0x1000000000015) 11:55:13 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:13 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0xffffffff) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000000)=0x401) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x208200) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 11:55:13 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:13 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x1f, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) ptrace$getregset(0x15, r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r1, 0x0, 0x12, &(0x7f0000000000)='T,:keyringGPLproc\x00', r6}, 0x30) ptrace$cont(0xe, r7, 0x81, 0xffff) ftruncate(r3, 0x200004) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = semget$private(0x0, 0x0, 0x4434f3ff1437218b) r12 = getegid() semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, r12, 0x2, 0xda}}) fchown(r8, r10, r12) dup(0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 406.450840] audit: type=1804 audit(1579953313.321:454): pid=26268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/139/bus" dev="sda1" ino=17249 res=1 [ 406.582677] audit: type=1804 audit(1579953313.321:455): pid=26268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/139/bus" dev="sda1" ino=17249 res=1 11:55:13 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:13 executing program 4: r0 = epoll_create1(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) flock(r1, 0xc) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 11:55:13 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x8, 0x0, 0x2, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000100)={r4, 0x623}) [ 406.831047] erofs: read_super, device -> /dev/nbd0 11:55:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 406.863144] erofs: options -> (null) [ 406.881593] block nbd0: Attempted send on invalid socket [ 406.887270] print_req_error: I/O error, dev nbd0, sector 0 [ 406.894815] erofs: cannot read erofs superblock 11:55:13 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x38, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:13 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0xb2a, 0x3, 0x4, 0x60000000, 0x80, {r0, r1/1000+30000}, {0x1, 0x8, 0x1, 0x9, 0x5, 0x7, "5310635e"}, 0x4, 0x4, @offset=0x80000000, 0x7, 0x0, 0xffffffffffffffff}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x69dea0cd, 0x4}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000180)=0x3, 0x4) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f646508b92b9996afb194f7d9d811406e791a61618ce049d6c35cd9a3abf23975193a51637c191a9758804277740953ae561213b711f3881b8af8e15f3a08dfdf13139bb88721132156402c81b7fda1cfe4c15122ce3171130b2a6af05efb33240000b029b8c5c7c8d538218995a38ba225771d7accb4829bdc3d00000000f3ffffffffffc4e1ca760e40fbf590c19ee3e8bee699b695db376f6fe8ab214e4235b8edcece08490cac18af7f15c08aa258ecf23dd2529c7f0000000000000000889a818ff453d4c483a38cd4c2672b4bc7fe43e9cf0b5e7c5269cc"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11:55:14 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x40100, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000480)=0x1c, 0x4) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000040)={0x3, 0x7, 0x100, 0x10001, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = gettid() r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x2040, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x8001, 0x128a, 0x800a, 0x7fff, 0x3, 0xfffffffb, 0xbc04, 0x1, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000400)={r7, 0x98}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) dup2(r0, r1) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x478, 0xd0, 0x2f8, 0xd0, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f00000004c0), {[{{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xffffff00], 'vlan0\x00', 'vlan0\x00', {0xff}, {}, 0x12, 0x6, 0x5, 0x3e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x1f}, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}, 0x9, 0x1d, 0x12}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1f, 0x0, "06eb29248a1471386f0ed2130df577946389591e998ccf4124ab8b9309eb"}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'team_slave_0\x00', 'ipvlan0\x00', 0x28, 0x3, 0x9, 0x7fff, 0x80000000, 0xce50, {0x9}, {0x81}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv6=@remote, 0x30, 0x1c, 0x1000}}}, {{@ipv6={@ipv4={[], [], @rand_addr=0x9c0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], 'gretap0\x00', 'bond0\x00', {0xff}, {0xff}, 0x6, 0x55, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@rand_addr=0x4, 0x1, 0x25, 0x7fff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000015) [ 407.474248] x_tables: duplicate underflow at hook 1 11:55:14 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x2, 0x7ff, 0x6, 0x3, 0x3f, 0x6, 0xfea}, {0xc0000001, 0x10001, 0x5, 0x3, 0x80, 0xe74c, 0x6}]}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x4, 0x718b9067d4f12421, 0xfffffff8, 0x6, 0x3}) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11:55:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x10, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 11:55:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x281, 0x2}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x4940) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000180)=""/187, &(0x7f0000000240)=0xbb) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x541b, &(0x7f0000000600)) close(r9) syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800) 11:55:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) [ 407.608914] x_tables: duplicate underflow at hook 1 [ 407.658162] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 407.680343] kauditd_printk_skb: 8 callbacks suppressed 11:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11:55:14 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) [ 407.680361] audit: type=1804 audit(1579953314.551:464): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/208/bus" dev="sda1" ino=17271 res=1 [ 407.727593] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 407.748360] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 407.827425] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 407.835574] audit: type=1804 audit(1579953314.681:465): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/78/bus" dev="sda1" ino=17273 res=1 [ 407.852451] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 11:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 407.910565] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 407.955892] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 407.983314] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 11:55:14 executing program 3: openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180d8000000ffffffffffff0000e0000000500100008801000073747000000000000000000000000000000000000000000000000000000000004800000000000000020000000200006e8700ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffffff00004e234e21040071ac0600ff7f3828cc2ee64b5b8edf220100736e6174000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000001000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ff3400000000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000f2e7a725f8672ef3f8080000000000bbfe8000000000000000000000000000aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000010000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff2100000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000000000000000000000000000000003e94fce46ef0b079000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f74610000000000000000000000000000000000000000000000000000001800000000000000000000000000000001000000000000000700009b000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb00"]}, 0x608) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) memfd_create(&(0x7f0000000780)='(\x00', 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xd4, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc}, @TIPC_NLA_MEDIA={0x94}, @TIPC_NLA_BEARER={0x18}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x700}}, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3}, 0x28, 0x0) 11:55:14 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 11:55:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11:55:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) [ 408.255810] erofs: read_super, device -> /dev/nbd0 [ 408.294174] erofs: options -> (null) [ 408.312340] block nbd0: Attempted send on invalid socket [ 408.318122] print_req_error: I/O error, dev nbd0, sector 0 [ 408.324196] erofs: cannot read erofs superblock 11:55:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) 11:55:15 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) clock_adjtime(0x3, &(0x7f00000000c0)={0x5, 0xd94, 0x200, 0x5, 0x101, 0x101, 0x100, 0x200, 0x0, 0xbb2c, 0x6, 0x1f, 0x4, 0x3, 0x40, 0x1, 0x83b, 0xb3c7, 0x800, 0x5, 0xfffffffffffffffc, 0xf8c, 0x3, 0x10460340, 0x4, 0x1}) 11:55:15 executing program 3: openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x18) memfd_create(&(0x7f0000000780)='(\x00', 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xd4, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc}, @TIPC_NLA_MEDIA={0x94}, @TIPC_NLA_BEARER={0x18}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x700}}, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3}, 0x28, 0x0) 11:55:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) [ 408.608199] erofs: read_super, device -> /dev/loop0 [ 408.613277] erofs: options -> (null) [ 408.711851] print_req_error: I/O error, dev loop0, sector 0 [ 408.719062] erofs: cannot read erofs superblock 11:55:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:17 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) connect$nfc_raw(r6, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) 11:55:17 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=ANY=[@ANYBLOB='/Dbd02\x00\x00\x00\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) openat$cgroup_ro(r9, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 11:55:17 executing program 2: r0 = getgid() lchown(&(0x7f0000000000)='./file0\x00', 0xee01, r0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x10500) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x98080, 0x0) read$eventfd(r2, &(0x7f0000000100), 0x8) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x290, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa052}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636388da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58b148d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b20b0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c23181d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cb63cd0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42f50a38}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65e720af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7333}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406edd55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6161}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d3ba877}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cfc3a03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66eba15e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cd92a1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab3eaa4}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b206d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xafc29ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f6db55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x275105b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x371f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3086}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a0d3322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61f2dc1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ae6cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39cb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5175b1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ffd1ca}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x370f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x723d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4a3d49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb3b53e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9ba}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x103eb07d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fd2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaee1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe14}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcebc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36bfa2e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6777}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73e7462f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34e2}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1807e586}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xace5}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4393804a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40f616de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb37bf79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2590ccb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6455}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7be6dee8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x607b}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) connect$rose(r3, &(0x7f0000000500)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x40) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000580)=0x8) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nullb0\x00', 0x8080, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000640)={0x6, 0x6, 0x4, 0x8, 0x7, {r5, r6/1000+30000}, {0x3, 0x1, 0x7f, 0x6, 0x5, 0x7f, "e57f30ca"}, 0x4, 0x4, @offset=0x400, 0x7, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x44011) r8 = syz_open_dev$vcsu(&(0x7f0000000800)='/dev/vcsu#\x00', 0x0, 0x4400) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000840)={0x1, r9, 0x1}) socketpair(0x7e, 0xa, 0x1, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000bc0)={0x5, &(0x7f00000008c0)=[{}, {@none}, {@none}, {@none}, {@none}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000c00)=0x9, 0xb63) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vsock\x00', 0x420400, 0x0) ioctl$SG_GET_VERSION_NUM(r11, 0x2282, &(0x7f0000000c80)) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/nvram\x00', 0x26880, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000d00)) socket(0x8, 0x5, 0x5) r13 = signalfd(0xffffffffffffffff, &(0x7f0000000dc0)={[0x101]}, 0x8) dup(r13) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/zero\x00', 0x208000, 0x0) ioctl$KVM_NMI(r14, 0xae9a) 11:55:17 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4}}, 0x0) 11:55:17 executing program 2: socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000001380)="e7", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/13, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_adj\x00') getpeername$inet(r0, 0x0, &(0x7f00000001c0)) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_adj\x00') writev(r1, &(0x7f0000001540)=[{0x0}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @ipv4={[], [], @multicast2}}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x3ff, 0x8, 0x1, 0x9, 0x11, "9ca07890d4aced457c2fee74174b134a590a48"}) syz_open_procfs(0x0, &(0x7f0000000240)='loginuid\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010e9050700"/20, @ANYRES32=r8, @ANYBLOB="0300000000000000280012000c000100766574680000940018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x5}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000000a800000008baa041f27245e1c8087a6f2a4940a704593c26763bdab77918478ea961e95035cb26db96057bbf7fa147f28d6f62f93fa1a07809327545d9e9b3a96d2efd9bfaa7a7fb216a9fd2468ffdb38df34ed9e6b365c21fade00c47c60ecac78ccf0d17cdd53ef7e51535a1ad49b84409f2e0d190d479f24e6de735b1d36cebf8079b41d6f43e4ef36fd189758d8d53cff9c46ddd199b518d17ed53aeba1cf511707a89912f3b290336ce5e966667b90a4d889", @ANYRES32=r7, @ANYBLOB="14000200fe8012a44952000000000000000000bb1400060008000000ff0100"/40], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) sendfile(r9, r10, 0x0, 0xffffffff) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f0000000340)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 410.977337] audit: type=1804 audit(1579953317.841:466): pid=26914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/81/bus" dev="sda1" ino=17296 res=1 11:55:18 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x7ff, 0x1, 0x4, 0x40000000, 0x6, {0x77359400}, {0x1, 0x2, 0x9, 0x80, 0x80, 0x3f, "e2b4c2d7"}, 0x4, 0x3, @planes=&(0x7f0000000040)={0x7fff, 0xe3, @fd, 0x6}, 0x8, 0x0, r2}) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:18 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz1', "54b779ce4969c07acb28fa3f4dbb7b0ce997b9d471936c234a17cc3d48e7c4b8d001d34c77263baf8f247bb40b00ca075ad1021d9bed0412a9722304f4564863"}, 0x44) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f00000001c0)=0x2) setsockopt(r6, 0x20, 0x1, &(0x7f0000000000)="3438d39bf93892d316f7bf56b3ad6099a10707d7450860eb6fd95f6fc76e3d7569a90d37e38354fc00f0d9d7ef2e94f5947a39eacc8ec2766c1309144098f422ebadde9c9f6da314801e668137db54f12b3c5edb52baafdb8a2118d1cf20d2563474a9d4b87cb7a4cfe807ecf2d21eb22d69046048737685e59e880fa1211248c36f518c26c2b935fe280e42f9137c17cdc9", 0x92) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:18 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r0, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4}}, 0x0) [ 411.300536] audit: type=1804 audit(1579953318.171:467): pid=27049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/10/bus" dev="sda1" ino=17293 res=1 [ 411.364059] audit: type=1804 audit(1579953318.211:468): pid=27043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/212/bus" dev="sda1" ino=17029 res=1 11:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4}}, 0x0) 11:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x5}}, 0x0) 11:55:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="080019d9010cc1aa8ecda96ab8a7020080", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7}, 0x8) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6900) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8400fffffffa) sendfile(r8, r9, 0x0, 0xffffffff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r12}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000180)={r12, 0xf1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r13, 0x8001, 0x13}, 0x8) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 411.777939] audit: type=1804 audit(1579953318.651:469): pid=27165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/213/bus" dev="sda1" ino=17279 res=1 11:55:18 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r0, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x5}}, 0x0) 11:55:18 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) openat$cgroup_ro(r9, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) [ 411.849153] audit: type=1804 audit(1579953318.661:470): pid=27167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/81/bus" dev="sda1" ino=17296 res=1 11:55:18 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'veth0_macvtap\x00', {0xa00}, 0x9}) mount(&(0x7f0000000600)=ANY=[@ANYBLOB='/dcA\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 412.051612] audit: type=1804 audit(1579953318.661:471): pid=27168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/81/bus" dev="sda1" ino=17296 res=1 [ 412.199955] audit: type=1804 audit(1579953318.891:472): pid=27050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/145/bus" dev="sda1" ino=17294 res=1 11:55:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 11:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x5}}, 0x0) 11:55:19 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 412.288214] audit: type=1804 audit(1579953318.951:473): pid=27040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/10/bus" dev="sda1" ino=17293 res=1 11:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b365"], 0x5}}, 0x0) 11:55:19 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x100200, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000080)) prctl$PR_SET_TSC(0x1a, 0x2) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f00000000c0)={{r8, r9+30000000}}, 0x0) tkill(r2, 0x1000000000015) r10 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x100) ioctl$KVM_GET_MP_STATE(r10, 0x8004ae98, &(0x7f0000000200)) 11:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b365"], 0x5}}, 0x0) 11:55:19 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r0, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:19 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400041, 0x41) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000003c0)) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200002, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@loose='loose'}, {@access_any='access=any'}, {@cache_none='cache=none'}], [{@euid_gt={'euid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 11:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b365"], 0x5}}, 0x0) [ 412.716995] kauditd_printk_skb: 4 callbacks suppressed [ 412.717014] audit: type=1804 audit(1579953319.581:478): pid=27422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/215/bus" dev="sda1" ino=17306 res=1 11:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d50"], 0x5}}, 0x0) [ 413.204112] audit: type=1804 audit(1579953320.071:479): pid=27392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/11/bus" dev="sda1" ino=17307 res=1 11:55:20 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) openat$cgroup_ro(r9, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 11:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d50"], 0x5}}, 0x0) [ 413.265135] audit: type=1804 audit(1579953320.101:480): pid=27392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/11/bus" dev="sda1" ino=17307 res=1 11:55:20 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r0, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d50"], 0x5}}, 0x0) 11:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031"], 0x5}}, 0x0) [ 413.497435] audit: type=1804 audit(1579953320.371:481): pid=27543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/83/bus" dev="sda1" ino=17307 res=1 11:55:22 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000680)=""/228) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x20, 0x8, &(0x7f0000000580)=[{&(0x7f0000000000)="f31da96a7e008f2a2a3a6272589e5b3ecacfb36e429a92de1a77a21deff94d646473be42e2f45b8ed8a29d82b52748983e8ed759", 0x34, 0xbdb4}, {&(0x7f0000000040)="b7a39525f26f8971137552118576cd1bde6f966a1b58cb65383e2d5fc43b75270f6e7fd7038b7cda1e67fc8fc20e2dbd7939e9e0041f19d2cefa2c7aebee0b9618dbf81b89be3983b001ca6ac23568beb2e4d59b16f3da80361362b5f40164c2c12aa210c3278004be97972f5e2b6477b98f4e06d613023789b4b95609239d5f5b52dba491f3c6d3cc2f58466c7b84fb516fd32af0c424bd41c4c7eba197f668280789207dd26b4055c00c4dc451535e6f1e1d793019e8194ffe13507119225288053755168f051149d799588968b6e7314da061340bc844b9e6b9d6af", 0xdd, 0xdc6}, {&(0x7f0000000180)="ae2dd97d73d8f557d8e14a92197b059cc0ea13d1a3b7dc54c52c3d51ebf51828f732140d07303311d8a7581d2e3f0ce7a61fe7dceb2a51dfd556d099e70e8bfe7d9d1ccbc06806c65660316fcfeac52490d2114d30772f8764e86bc12754702cd620b51dc9d3a9416a2986ff7a1a9f", 0x6f, 0x9}, {&(0x7f0000000200)="c8c139cd696ca27ab437232b83b47eea2ac6aadb68065e473a75daa5d7cc89f589f14c812f53145f3238c67e6775096800c7379913b2e56b27b7cb59cedf30e940550d669e5f9814561c61d1", 0x4c, 0x9}, {&(0x7f0000000280)="6ac81bcc5328b2cd7cdab60c8a513c59928a8166124e3cb8ccea33a9ed67690e3ae6681d757bad395da5ea1e94c674fe28c2071d020e0610549aa4751ad1162977295406ad1776f5d8f2580ae8798b461331c908ee589d791381ddcaf19bb132fdc89c910dcd7d63e2417e3621d26946cbc50288ad409b12d05a4a4f44c9ad1ea025830729a81ddc9814bee9b061542abbd3f0b2b2de21b26975aed0e69e7820a277421bd1623151664a761b32a187f90dbfabf1e9a31159d1b478e3b71ae4", 0xbf, 0x7}, {&(0x7f0000000340)="1a6f6158e278ba5f52d5185b4009eac4149342a2678e9823476b866b105733780406c1aae261f77397e012922f3ba3a5aa68cd2439a26551fe08f23b39768befd6527533a1", 0x45, 0x1f}, {&(0x7f00000003c0)="f4d32d7164140a1437efc8f5e9e090587a1586c66c85403dcc8ac6c460168af9103b4e7968b6eb579a18c2c66dfbedf7e126cc48d41b86460c103a3f30014ad2d91858ccb6e53f1d5b3cd7fb6431abfa21d671ed7826d24ee313ed3937351eb22013dec63b7b9a079ed7b99a936c263693768455f88930f9a0489486920b6af08d99574bb6158797de073a35754ded6cb74f9f0bc63b1865ac3a64a45df4633833fa5a63667452a74e44792e512bedebfed0493140ae9fa33496ef3a70424be114f8c3b78c2d184b7f80b6b207872b2ace0e55e6a58fd2debe1f882fd64892", 0xdf, 0x1f}, {&(0x7f00000004c0)="0a38ddc066120c49dbe9000dcf2a65866b278bcc715eddb32bc21201d62ab18b59196cbb15f06a201969aed248309dff9e293c49253cf5ef8ab2dc042de28ea83e94c25fd812fbf621c707a74848e6d497ef262965cd93014efe889d340e6de463f7d0a4084ccd9dfa8ce6d4a76cf2ca6e97956986e698be485e8f3ed7acd0bfb54c212820a052942dcd4d3c6b269a2fce13d6e15c9a8928449a86d8f09dfe4bcbb7720cafe6121707048e303d0e1f6f106a4d4d67", 0xb5}]) tkill(r2, 0x1000000000015) 11:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031"], 0x5}}, 0x0) 11:55:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:22 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r0, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r4, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup3(r6, r7, 0x0) dup2(r5, r9) 11:55:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) openat$cgroup_ro(r9, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 11:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031"], 0x5}}, 0x0) [ 415.719461] audit: type=1804 audit(1579953322.591:482): pid=27575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/84/bus" dev="sda1" ino=17322 res=1 11:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e13"], 0x5}}, 0x0) 11:55:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e13"], 0x5}}, 0x0) 11:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e13"], 0x5}}, 0x0) 11:55:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:23 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000015) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x6, 0x810e, 0x400, 0x5, 0xffff, 0x7, 0x1ff, r8}, 0x20) 11:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146d"], 0x5}}, 0x0) [ 416.736514] audit: type=1804 audit(1579953323.601:483): pid=27610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/149/bus" dev="sda1" ino=17317 res=1 11:55:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) 11:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146d"], 0x5}}, 0x0) [ 416.939374] audit: type=1804 audit(1579953323.811:484): pid=27615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/149/bus" dev="sda1" ino=17317 res=1 11:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146d"], 0x5}}, 0x0) 11:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d"], 0x5}}, 0x0) [ 417.141079] audit: type=1804 audit(1579953324.001:485): pid=27623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/85/bus" dev="sda1" ino=17312 res=1 11:55:24 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) dup2(r0, r1) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) ptrace(0x10, r5) ptrace$getregset(0x15, r5, 0x0, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$getregset(0x15, r6, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x105001, 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6900) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8400fffffffa) sendfile(r7, r8, 0x0, 0xffffffff) sendmmsg$inet6(r8, &(0x7f0000002b80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x13}}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000000340)="35f4706524403e0113cb404e1ff90fe4c956890ddd0db76cc27ba3c74d2c6b487a65b74d0fe14168cb24f95a8edebb1b3a54ec14e212ce144b1c3282145249f7317593fa35a21cea9fcf3312366bca99b8c0e663f2450a1778a4a02c04b95456f817ec0d2edf8e4fb95b063ca0ecff7fc4c65312d4be0532573ee4bdcb10cea890318e3b5c0f7e4f53e33c479d90540dbcccaf38b908705298d0becb1ae5181ecff46e5c14755355443d66076a1c6ce2f480f67a6cd143541b1315306840ac5cecc6eb2d9c052597c68b1c32c2f428a22e6aa0b7a482a574", 0xd8}, {&(0x7f0000000180)="e501962cc673cbb5413b64e8c0d1980a986d4067672da6fadc3dbd1a3042a937e28e3e7779322f4f", 0x28}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000200)="e82c06c848d70ae985b9b6dcf8178455afb3ae7d77287a7d16f536e09b8e6657dbc3fb8aa0183c21119d8d791c4ba518e72c8a799041b5b7cb9dd8e1aade69", 0x3f}, {&(0x7f0000002540)="0c4ee8e5fc359efecdbc17490abe1837b8ae6cb8d32c24e432f212a7170629bb1e0fe9d4f7c3ab7ad12c297a99289b26ea1b47052eda86abb3b01a058a4faa0fc177deec43730870f7a62f849358dd810ed2955b7b0a5279e8907604e8376356660744c677fb03e746304b6bd9bd17436a51a3daf9bfa4453c4ae249ce47c19cc49ae9aa078b875e8272ff83c8bc5f40a3b9a313c83763ff28af638434f6560df598b77b9831fbf28f961a6e9cf5c30785503b99", 0xb4}], 0x7}}, {{&(0x7f0000002680)={0xa, 0x4e21, 0x4277eccc, @mcast2, 0x7}, 0x1c, &(0x7f00000028c0)=[{&(0x7f00000026c0)="28e2c370df46e65a634992e1", 0xc}, {&(0x7f0000002700)="38e29fd1122e71136f29268e62f5851706616816e4dc769eda5fcc15f7194c4c94659c72302ab037534e98c0ce2233f79428fd082f181ecd482cdace5423d9e93c779a52d0d3c6427651c71cb9b14ff7bbe26a9a9f0b59e29bd86c7dc84b5dda845e945b9ed26627f959037bc2286c710fd3990dd138598e6e39ca606f778e31cc1da14c5bcba0f87eff3567b8e47b51fc9cf2f1b5e1212e7d7f1e0585a3255722ac02493d412946eb2418077339224085268cf4f3e37c8b15de90bc3be6e0be17b1dd797640cfcdb4d44d2c394c58aa482ef7801468d445b98d2e83624673917f433df83d8c5172366501e7d9", 0xed}, {&(0x7f0000002800)="bab948d5d02fd61d02fdea39235bab4c156ae5f0dca8c44dad84062c556b026099512760bc26db4f7a8be2d39a8882c71beea8cbc1ddc8f63e3f847a4e681ada4d86a160e625b0caf752b9a30c0d0b60fe5d70d513189dd7842425f153a9d28c97b9eec3cc4eeabc7856ec5682118c13f3458383d7c01cf77014f4b722e0338a64fdefd511559d04ffda04e1e40ea8217e5ebc7e0a07d7585b2a51136b2e8fc6e97a8a59", 0xaa}], 0x3, &(0x7f0000002900)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x1, 0x6, 0x0, [@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, [], 0x3f}, @mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @empty}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5e, 0x0, [], [@ra={0x5, 0x2, 0x8231}]}}}], 0x110}}, {{&(0x7f0000002a40)={0xa, 0x4e21, 0x2, @rand_addr="08a3f8ee21cddf10a5506f904b8a4c6c", 0x1}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002a80)="3540dae9ece5db1bd7efdec354bd1a1e9a5454221789e121e1b45afef83bcdb706ea3c970b6e378a01f1", 0x2a}, {&(0x7f0000002ac0)="e59fe54f4c082992755c5c675f4e5ff6563c2aecd16e2dc7ef01701f00c28cf153979ad20417063c497c67eb9728d51f8436f9a5364417cb3d84cc5b2de5ca67d6f28dcb8eceb7c918dba724d2425b27746d2771e4fb88c2aad6", 0x5a}], 0x2}}], 0x3, 0x808) getpgid(r6) timer_create(0x5, &(0x7f00000001c0)={0x0, 0xe, 0x2, @thr={&(0x7f0000002c40)="4b0240279f1a3fea3baaef5e3c81788062fe1b24591b421cbac788ba83d862cae2f54897d759e6cc1330313853e19ed19dce49853887e1c098c38922d8b9f60a3e4eb31d0ccc34db5b0d930897e321cbcd8a6467ce435b0589120c04b9607ea3a62eb1eb06c6fbc651a75441f5ffa038826ed1fd8a79a7ac7c42fa0c72ed9d315c96974727cc8ddbe5c77280d7ced044811d271e4528449d36dab67855eb487b4e91615744b08c84440c3ba7", &(0x7f0000002d80)="0499ba517a0435ff5a44a9274c4f09d0af852c4799a918a142bdc34810dd1ae1aa0f9c5e7ee5ee39cb3b69254a521785edc099acaae878e33d9b33dffb10ef1fb252c11a14dd88e95285786087ab1ba4af0a0ac75529f51aa48259c82ac244c633b8d1c929a02bb73f94e4438e0c7bcdbabe5606933b20"}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 417.312577] audit: type=1804 audit(1579953324.181:486): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/150/bus" dev="sda1" ino=17248 res=1 11:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d"], 0x5}}, 0x0) 11:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d"], 0x5}}, 0x0) 11:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a"], 0x5}}, 0x0) 11:55:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) sendfile(r10, r11, 0x0, 0xffffffff) 11:55:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a"], 0x5}}, 0x0) 11:55:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x9e18) r6 = open(&(0x7f0000000100)='./bus\x00', 0x400141042, 0x0) write$FUSE_LK(r6, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6900) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ftruncate(r8, 0x804) lseek(r7, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x8400fffffffa) sendfile(r7, r9, 0x0, 0xffffffff) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x6, 0x11d5, &(0x7f0000000340)="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"}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x100000001, 0x8, 0x0, 0x200000000000}) 11:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a"], 0x5}}, 0x0) [ 418.169820] audit: type=1804 audit(1579953325.041:487): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/86/bus" dev="sda1" ino=17339 res=1 11:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) [ 418.303771] audit: type=1804 audit(1579953325.121:488): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/15/bus" dev="sda1" ino=17340 res=1 11:55:25 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 418.733337] audit: type=1804 audit(1579953325.601:489): pid=27685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/15/bus" dev="sda1" ino=17340 res=1 11:55:27 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x4, &(0x7f0000000080)={0x0, 0x19, 0x4, @thr={&(0x7f0000000000)="64ef913fcbd36042208ec105e8dc79d5cae48d67c10ad36c833b0ae89a99800ddd76fdafb2e6bc5798d223a713e0e1152a161cddc4997d0b5b3764fcd278fe14e0fa83baf2e95e8eca3f91988fa5f7", &(0x7f0000000180)="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"}}, &(0x7f00000000c0)=0x0) timer_getoverrun(r5) r6 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:27 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x1ed, 0x4, 0x0, 0xe3, 0x1, 0x7fffffff, [], 0x0, r3, 0x1, 0x1}, 0x3c) tee(r0, r4, 0x9, 0x3) 11:55:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:27 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'veth1_to_team\x00', 0x3}, 0x18) [ 420.316331] erofs: read_super, device -> /dev/nbd0 [ 420.334608] erofs: options -> (null) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) [ 420.380760] block nbd0: Attempted send on invalid socket [ 420.386344] print_req_error: I/O error, dev nbd0, sector 0 [ 420.407508] erofs: cannot read erofs superblock 11:55:27 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f00000000c0)={r0, r4, 0x75b1}) r5 = epoll_create1(0x0) flock(r5, 0x2) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup2(r0, r5) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000015) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 420.457528] audit: type=1804 audit(1579953327.321:490): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/87/bus" dev="sda1" ino=16849 res=1 11:55:27 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26120000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:27 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400600, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ptrace(0x10, r3) ptrace$getregset(0x15, r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)='^#\x00'}, 0x30) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x6, 0x4, 0xe63, 0x9, 0x4d, r6}) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r12, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='^#\x00', r13}, 0x10) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1000000000015) 11:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:28 executing program 0: openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="2f64852fa13ef093fa5e"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x4, @raw_data="308cb9c6b07d3abd179404ae400ec7514b9382e59167a1f1eec3a4801da8555be3b8729775d9a2847bfa95f2e74cd4055aaa1d46c1c2fc9d8490179a80b4e901a0587af2a4da8a016be9d1be6d83dadafd176c9862faa326356a04003eb328df73078248fc8de0ae9ef4f0ec1becbaa63f3c2af1ee109f0661e9f3da6dee4ad94aa2a77c810531183c7322294b6517a1a0baa76e99c52b40e36fc9c0efb0178781f7482510c0877474efc389b8badb4307c290eeb18467ed351ca62c2005a60c2a66fb417c43cc4f"}) 11:55:28 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:28 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0xffffffff) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x3b85e8d8c0652113, 0x0, 0x94, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909e5, 0x0, [], @p_u16=0x0}}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) dup(0xffffffffffffffff) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 11:55:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) 11:55:28 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:28 executing program 0: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000080)={0x9, 0x8, [0x2, 0x9]}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 421.420543] erofs: read_super, device -> /dev/nbd0 11:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) [ 421.452149] erofs: options -> (null) 11:55:28 executing program 4: r0 = epoll_create1(0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x22080, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') flock(r0, 0x1) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x12) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) r5 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x800) fsetxattr(r5, &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f0000000240)='\xafy\x9d\xbf\x1f\x01\x95\xd5\\\xe0\xb0#\x04\x97\x7f$\xf2wtm\xf4\x88\xa5\x1dJ\xca\xba\xd0\xc7\xee\xd7y=\xf0', 0x22, 0x2) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) prctl$PR_SET_FPEXC(0xc, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup2(r0, r2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1) [ 421.474964] block nbd0: Attempted send on invalid socket [ 421.480661] print_req_error: I/O error, dev nbd0, sector 0 [ 421.497865] erofs: cannot read erofs superblock [ 421.511446] audit: type=1804 audit(1579953328.381:491): pid=28073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/88/bus" dev="sda1" ino=16769 res=1 11:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:28 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 421.652693] audit: type=1804 audit(1579953328.521:492): pid=28183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/155/bus" dev="sda1" ino=16561 res=1 11:55:28 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 11:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 421.796550] audit: type=1804 audit(1579953328.521:493): pid=28173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/17/bus" dev="sda1" ino=16609 res=1 [ 421.880004] erofs: read_super, device -> /dev/nbd0 [ 421.904293] erofs: options -> (null) 11:55:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x8, 0x6, @local}, 0x14) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) flock(r0, 0x0) r8 = epoll_create1(0x0) flock(r8, 0x2) r9 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r13 = accept4$alg(r12, 0x0, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write(r13, &(0x7f0000001480)="8b", 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r14, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r13, &(0x7f0000000340), 0x1e0}]) r15 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) dup2(r3, r8) r16 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) bind$rxrpc(r16, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) r17 = getpid() rt_tgsigqueueinfo(r17, r17, 0x16, &(0x7f00000000c0)) ptrace(0x10, r17) ptrace$getregset(0x15, r17, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x13, 0x3c6e0bcaa8bc2280, @tid=r17}, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r9, 0x1000000000015) [ 421.985918] block nbd0: Attempted send on invalid socket [ 421.991636] print_req_error: I/O error, dev nbd0, sector 0 [ 421.998240] erofs: cannot read erofs superblock [ 422.363933] audit: type=1804 audit(1579953329.231:494): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/17/bus" dev="sda1" ino=16609 res=1 11:55:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 422.397857] audit: type=1804 audit(1579953329.271:495): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/17/bus" dev="sda1" ino=16609 res=1 [ 422.424490] audit: type=1804 audit(1579953329.271:496): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/17/bus" dev="sda1" ino=16609 res=1 11:55:29 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r5, 0x9}, &(0x7f00000000c0)=0x8) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="2f6465762f6e771c276b"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:29 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r13, r12, 0x0) 11:55:29 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:29 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000140)=0x8) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000) 11:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:29 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 422.905620] sctp: [Deprecated]: syz-executor.0 (pid 28436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.905620] Use struct sctp_sack_info instead 11:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 422.967954] erofs: read_super, device -> /dev/nbd0 [ 423.007653] erofs: options -> (null) [ 423.011664] block nbd0: Attempted send on invalid socket [ 423.017669] print_req_error: I/O error, dev nbd0, sector 0 [ 423.032494] erofs: cannot read erofs superblock 11:55:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:32 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) epoll_create(0xdf) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) mmap$xdp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000006, 0x40010, r1, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r3 = dup3(0xffffffffffffffff, r0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="f7a707e4e30110499469f2a7a81c40caa6341d56d84f99cc854dc9022c8ab4239f2bc3f644e007cbeaee23620164ea854cd62ba26f11de041611ce24d1348b296eaee6f37a551907f7daf202fc76092bd331ea4df74008bb219a31e8405169da738cf660c61e9b13f2c43c1eaa4de3d81ba26cdd3e9ee62f27bf52672c8060cf2a81e1440c19ab9ab42d225fef58d9b9d5f61f5323debe6410c808013a3143b718443771e55d6a97cf33869a572b484e63a7f2315022", 0xb6, r3}, 0x68) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x6, 0x1f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x7, 0x1, 0x0, 0xc2e, 0x6405ca1b, 0x10000000000000], 0x5000, 0x206090}) getpeername$netlink(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xc) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:55:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:32 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 11:55:32 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000000)={r8, 0x2e, "2ab76bd1e43ea0377f5db9aced0241285b03a08a3a4c4e2b95bfcc4033131a45532c4f9c798101089a3f7130d1b0"}, &(0x7f0000000040)=0x36) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 425.204516] kauditd_printk_skb: 1 callbacks suppressed [ 425.204539] audit: type=1804 audit(1579953332.071:498): pid=28560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/223/bus" dev="sda1" ino=17351 res=1 11:55:32 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r4}) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000000080)=0x200) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) dup2(r7, r8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) write$selinux_user(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:sshd_var_run_t:s0', 0x20, 'sysadm_u\x00'}, 0x2d) [ 425.353089] audit: type=1804 audit(1579953332.141:499): pid=28561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/90/bus" dev="sda1" ino=17346 res=1 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:32 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26374900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 425.700785] erofs: read_super, device -> /dev/nbd0 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 425.737725] erofs: options -> (null) [ 425.755132] block nbd0: Attempted send on invalid socket [ 425.761182] print_req_error: I/O error, dev nbd0, sector 0 [ 425.776701] erofs: cannot read erofs superblock 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:32 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000005c0)) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffeffff, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="09138989e0ea631940743d2a273612930cac10ccaff101a3d03a1a93efd39bd8925036e2944dd18c8f2cfade219b1167e455a1bfcde22ced13874875c8e96af49b41e064b8d004aec900a0399ab7dcf9c1fc1a1d8ee8418313a0a263a316e37dabf2ec4f19aa11e6ac1ac4b381186a32bed4ee6e5f4dde868ea8ca725a9986d270b3d6aede106aa865eaa7794c7e6d3d623e790b7f4b56af08412da0d696524011d984cbf632e8cce52ba49f414e71179b2677435011187aa459e3450a63ed330ba4d98ddbd80d6406488f8c853e06255ffaf081f29c976740d756bcb31b6ab335b9284e35b6fd818562d77691783c0665b40467d95994e6bc2f08", 0xfb, 0x1}, {&(0x7f0000000200)="62bf9c0cfcb48d299174eb25c78402cb74462635b947e21ffc910ddeaf6364ed74145236b5a281db5b66cf349753961473bb6448cd74ad56873c02ea9bfdd1051d4ffe96a59585381c3d6ec785c23035568ec5be1b259359559166fc23313a324fea6c92b95ad8f003d4deef04b172580ef2e7706f579da1d89f9bf78e1b9be59f620a", 0x83, 0x2}, {&(0x7f00000002c0)="8c6148e42007d654abb00c55e5dc3878e3f85618b9efb48498b23852feb669d669304f67786d883c6ff0be777e9c460db6b3f4c47242354898a25f9058baf2f949a286645258b4e17760f0e26eb93d50f03b689f932954033ec4c6def30b49e8ad0ff9d2cfd2e3c41e324dd839676784499ec1158d681d6878008859d25d8dab50216f26a5d4c4be63fcd42aeb42131561066bf3ac4de9911440fdd1df02c857", 0xa0, 0x5}, {&(0x7f0000000380)="1c1f59ce680cec3dba674474c77a67bc6e376a7cab4ce683e4100ecf4c4669a5b158ebfb07de49227fa4f0c28ed5b9be367929d75b9ad1847dc8788f2fde4afefedc6d368995f283f3a879c79701a83aa340b9fdfe83977ffa3bad5f72713da56d4536cb7a8e71e39489f656e326016c8f25af5fd5558616d330bff21814d30c426cda354bf2a0190cec4cadfb5964bca1e680d66b91424fc72621e6b29961b195967728ed38222d4d92d075f717290792f1e20955cc163289ce5e79cade0c34", 0xc0, 0x8}, {&(0x7f0000000440)="ab207fff4f0bab539ed9f606ff3204dd06a9d2bbb65c3c05ac6d79907b2db2b6", 0x20, 0x1000}], 0x80108a, &(0x7f0000000500)={[{@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}, {@shortname_mixed='shortname=mixed'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@shortname_win95='shortname=win95'}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x37, 0x62, 0x62, 0x66, 0x64, 0x31, 0x35], 0x2d, [0x1a, 0x30, 0x38, 0x62], 0x2d, [0x65, 0x62, 0x36, 0x65], 0x2d, [0x62, 0xadb06bb2c3e6e84a, 0x65, 0x63], 0x2d, [0x34, 0x38, 0x31, 0x65, 0x34, 0x53, 0x32, 0x63]}}}]}) clone(0xb5112900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="2f07656e11ef7028"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:32 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) 11:55:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 426.029524] audit: type=1804 audit(1579953332.901:500): pid=28808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/225/bus" dev="sda1" ino=17351 res=1 11:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 426.324375] audit: type=1804 audit(1579953333.191:501): pid=28923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/91/bus" dev="sda1" ino=17297 res=1 11:55:33 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r6, 0xd, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:33 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xf000, 0x5c, 0x5, 0x0, 0x0, [{0x1, 0x4, 0x7f, [], 0x4c}, {0x1, 0x2, 0x1, [], 0x7f}, {0x95, 0xfa, 0x5}, {0xa0, 0x1, 0xff, [], 0xfe}, {0x5, 0x6, 0x5, [], 0x4}, {0x0, 0x7, 0x0, [], 0x5}, {0x9, 0x1, 0x81, [], 0x27}, {0x32, 0x2, 0x1a}, {0xff, 0x20, 0x7, [], 0x5}, {0xff, 0x8, 0xf1, [], 0x40}, {0x0, 0x3, 0x8, [], 0xff}, {0x4, 0x8, 0xc9, [], 0xff}, {0x80, 0xf8, 0x8, [], 0x5}, {0x1, 0x8, 0x4, [], 0xfb}, {0xa, 0x7f, 0xca, [], 0xb9}, {0x9, 0x1, 0x3, [], 0xe0}, {0x9, 0x9, 0x6, [], 0x6}, {0x1, 0x1}, {0x7, 0x1, 0x8, [], 0xcd}, {0x1f, 0x60, 0x1, [], 0x2}, {0x7f, 0x6, 0x1f, [], 0x8f}, {0x1, 0x1f, 0x39, [], 0x4}, {0x9, 0x6c, 0x2, [], 0x3}, {0x9, 0x9, 0x7, [], 0xb3}]}}) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) sendfile(r1, r4, 0x0, 0xffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x424002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400ffffffbe) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000980)={0x53, 0xfffffffffffffffc, 0x1000, 0x1f, @buffer={0x0, 0x93, &(0x7f0000000080)=""/147}, &(0x7f0000001880)="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", &(0x7f00000008c0)=""/172, 0x7, 0x25, 0x2, &(0x7f0000000180)}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x5eb, 0x7, 0x200, 0x7e0, 0x6, 0xe9c, 0xfffffffd, 0x2, 0x0}, &(0x7f0000000580)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000005c0)={r12, 0x6, 0x7, [0x8, 0x3, 0x7, 0x8, 0x0, 0x7, 0x4]}, &(0x7f0000000600)=0x16) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x49, 0x8, 0x0, 0x0, 0x95, 0x80, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x80000001, 0x1}, 0x10000, 0x9, 0x80000001, 0x1, 0x6, 0x8, 0xfff}, r5, 0x6, r6, 0x3) syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x80400) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x8001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r13, 0x54a3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b, 0x1}) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="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"/375], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 426.568840] audit: type=1804 audit(1579953333.431:502): pid=28929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/226/bus" dev="sda1" ino=17355 res=1 [ 426.691309] audit: type=1804 audit(1579953333.561:503): pid=28974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/159/bus" dev="sda1" ino=17353 res=1 11:55:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x2, 0x20, 0x4a9a, 0x1000, 0x7, "91ef4b1e8430c99832da69339ed2d0347f7467", 0xfff, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x200200, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0xffffffff, 0x7f, 0x7, 0x8, 0xfff}, {0x8, 0x200, 0x7, 0x7fffffff, 0x9, 0x1}], [[], [], [], []]}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x80000000, 0x4) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="9d35000000000000000011d9b42a244444410b19e06f9f37880d1acf204ec48227dd6a1cc721b71ebbaf90b96b52ac3c8891fa2f5fef0b9bc6d604fa93d42430bbb3e2bad883fa837568bd65cbb577fd314a094a9a848a38861f41876cd578e7f292a90127f773c53de596e9"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) [ 426.909889] audit: type=1804 audit(1579953333.781:504): pid=28974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/159/bus" dev="sda1" ino=17353 res=1 11:55:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:34 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 427.072053] audit: type=1804 audit(1579953333.811:505): pid=29047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/227/bus" dev="sda1" ino=17345 res=1 11:55:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 11:55:34 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400080, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000340)=""/153, &(0x7f0000000400)=0x99) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xffff, 0x30}, &(0x7f0000000140)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000300)={0x1, 0x0, 0x1c, 0x11, 0x179, &(0x7f0000000640)}) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ustat(0x200, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r3, 0x4) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6900) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8400fffffffa) sendfile(r7, r8, 0x0, 0xffffffff) ioctl$TIOCGPTPEER(r8, 0x5441, 0x6) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="2f64a8ef123299aaac3d"], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) [ 427.412184] audit: type=1804 audit(1579953334.271:506): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir300651732/syzkaller.daFS2u/92/bus" dev="sda1" ino=17217 res=1 11:55:34 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x454c00, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xdd79d9801bded63c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x104, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="100025bd7000ffdbdf250200e60006000b0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x20004080) [ 427.495386] audit: type=1804 audit(1579953334.341:507): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir109525267/syzkaller.bDbWJZ/228/bus" dev="sda1" ino=17365 res=1 11:55:34 executing program 2: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}]}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000080)={0x10000}) 11:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x4}}, 0x0) 11:55:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x0, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:34 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x10000, 0x2, 0x8}) r2 = epoll_create1(0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x9, 0xb, 0x4, 0x200000, 0xffff, {0x77359400}, {0x4, 0x8, 0x9, 0x0, 0x7f, 0x5, "f1db3942"}, 0x10001, 0x2, @offset=0x1d5, 0x7f, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000180)={0x7, 'veth0_to_batadv\x00', {0x1}, 0x8}) flock(r2, 0x2) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) fcntl$setownex(r8, 0xf, &(0x7f0000000240)={0x2, r4}) dup2(r0, r2) r9 = socket(0x0, 0x1, 0x1) dup3(r5, r9, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000015) 11:55:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) 11:55:34 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0xa040, 0x0) 11:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) 11:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:34 executing program 0: mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000240)={0x2, &(0x7f0000000080)=""/68, &(0x7f0000000200)=[{0x4, 0x47, 0x20, &(0x7f0000000100)=""/71}, {0x3, 0x7c, 0x8000, &(0x7f0000000180)=""/124}]}) mount(&(0x7f0000000600)=@sr0='/dev/sr0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x3000008, 0x0) 11:55:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstatfs(r0, &(0x7f0000000400)=""/128) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0xffffffff) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000080)={0xb, {0x200, 0x3ff, 0x3, 0x5}, {0x5, 0x2, 0x2, 0xffffffff}, {0x8, 0x1}}) [ 428.245612] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x0, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:35 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0xffffff93, 0xfffffe01}, {0x7, 0x4}]}, 0x14, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=ANY=[@ANYBLOB='/dEv/nbd0\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6}, 0x8) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x10, 0x7, {0x51, 0x9, 0xf001, {0x210, 0x2}, {0x3f, 0x400}, @period={0x58, 0x3, 0x5, 0xfffb, 0xaa5e, {0x1ff, 0x81, 0x100}, 0x2, &(0x7f00000000c0)=[0x4, 0x6]}}, {0x57, 0x0, 0x8, {0x100, 0x1000}, {0x42aa, 0x6}, @cond=[{0xffff, 0x4926, 0x0, 0x8000, 0x0, 0x7}, {0x0, 0x9038, 0x7e, 0xfff8, 0x6, 0x3}]}}) 11:55:35 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) creat(&(0x7f0000000680)='./bus\x00', 0x0) 11:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:35 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000000)='./file0\x00', 0xc) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:35 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:35 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:35 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x248000, &(0x7f0000000140)='(-mime_typeproc\x00') 11:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 429.013281] erofs: read_super, device -> /dev/nbd0 [ 429.044252] erofs: options -> (null) [ 429.075655] block nbd0: Attempted send on invalid socket [ 429.081668] print_req_error: I/O error, dev nbd0, sector 0 [ 429.091640] erofs: cannot read erofs superblock 11:55:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x0, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x0, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r7, 0x0) 11:55:36 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/238, 0xee, 0x41, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 429.168456] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:55:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 11:55:36 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:36 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$getregset(0x15, r3, 0x0, 0x0) tkill(r3, 0xa) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x42000, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000040)={0x4, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 429.484300] erofs: read_super, device -> /dev/nbd0 11:55:36 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 429.532419] erofs: options -> (null) 11:55:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 429.561104] block nbd0: Attempted send on invalid socket [ 429.566693] print_req_error: I/O error, dev nbd0, sector 0 [ 429.572838] erofs: cannot read erofs superblock 11:55:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB='\x00'/12, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/3906], @ANYPTR, @ANYBLOB='\x00'/18]) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x100000001) shmdt(0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x208000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000001780)={0x1508, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x5}, 0x1f, 0x80, 0x101, 0x2, 0x6, 'syz1\x00', "d4e8d79666d0af98b2d5790c4c5794ceceefd04a78de1b051027e0c26578f720", "b7357c241afa0f1606d14efea874624f0a3753d37dcc108b5ffe4d0e2a9336d0", [{0x2, 0xad, {0x1, 0x500}}, {0x7, 0x2, {0x1, 0x4}}, {0x800, 0x4, {0x0, 0x81}}, {0x7ff, 0x7, {0x0, 0x5}}, {0x1000, 0x6, {0x1, 0xe949}}, {0x8, 0x0, {0x0, 0x3}}, {0x4, 0x1, {0x1, 0x4}}, {0x7f, 0x6, {0x0, 0x2}}, {0x3ff, 0x1, {0xa6bc36be7f0b028d, 0x3}}, {0x20, 0x8, {0x1, 0x8}}, {0x6, 0xff9b, {0x2, 0x7}}, {0x6, 0xff, {0x2, 0x3b}}, {0x2, 0x1, {0x1, 0x800}}, {0x8, 0x42, {0x1, 0xffffa257}}, {0x0, 0xff7f, {0x3, 0x6}}, {0x2, 0x1000, {0x0, 0xffff}}, {0x1, 0xff, {0x2, 0x200}}, {0x3, 0x4, {0x0, 0x1f9c00}}, {0x1, 0x625, {0x0, 0x7}}, {0x200, 0xc019, {0x2, 0x1}}, {0x0, 0x8, {0x1, 0x80000001}}, {0x2, 0x100, {0x0, 0xc7}}, {0x6, 0x1f, {0x1, 0xffff}}, {0x200, 0x2, {0x3}}, {0x88a, 0x8, {0x1, 0x80000000}}, {0x7, 0x1, {0x2, 0x4}}, {0x101, 0x8, {0x1, 0xe21c}}, {0x401, 0x8001, {0x3, 0x101}}, {0xa762, 0x3ff, {0x2, 0xff}}, {0x0, 0x8, {0x1, 0x4}}, {0x3, 0x800, {0x1, 0x1f878ecb}}, {0x200, 0xb44, {0x3, 0x800}}, {0x5, 0x2, {0x2, 0x6}}, {0x101, 0xbad3, {0x2, 0x17}}, {0x7fff, 0x6}, {0x5, 0x8001, {0x3, 0x7}}, {0x8, 0x2, {0x1}}, {0x9, 0x6e5, {0x3}}, {0x401, 0x5, {0x3, 0x2}}, {0xfff8, 0x3f, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x10, 0x5, 0x55c, 0x0, 0x18, 'syz0\x00', "793af8b2ea26391ab2ace253f68099897c138fb7f9f9b16f7776d6b8e4aa6d99", "e764eac6809eef5c47b79bbe747a18bda67435df132023e3fc5488c2f9a0bf84", [{0x3ff, 0xfc0, {0x2, 0x6}}, {0xfeff, 0x81, {0x3, 0x9}}, {0x0, 0xffc0, {0x2, 0x8}}, {0x8, 0x197e, {0x0, 0xa67}}, {0xfc00, 0x9, {0x3}}, {0x73f, 0x3f, {0x3, 0x292abf07}}, {0x0, 0x0, {0x2, 0x6}}, {0x1, 0x0, {0x3, 0xe4b}}, {0x3, 0x0, {0x1, 0x1}}, {0x1ff, 0x4, {0x1, 0x3}}, {0x100, 0x6, {0x2, 0x3}}, {0x800, 0x4, {0x0, 0x1}}, {0x0, 0x800, {0x0, 0x8001}}, {0xa6f7, 0xffff, {0x2, 0x1}}, {0x7, 0x400, {0x0, 0x1}}, {0x1, 0x1ff, {0x0, 0x12}}, {0x4, 0x3ff, {0x0, 0x1000}}, {0xfffd, 0x7, {0x3, 0xc650}}, {0x9f, 0x5, {0x1, 0x9}}, {0x3, 0x7ff, {0x3, 0x3}}, {0x7, 0x8b6, {0x2, 0x1ff}}, {0x8, 0x3, {0x2, 0xfffff5d8}}, {0x339e, 0xbf7, {0x2, 0x2}}, {0x7ff, 0x2, {0x3, 0x1}}, {0x17, 0x7ff, {0x3, 0x6}}, {0x401, 0x0, {0x1, 0x78}}, {0x6, 0x589e, {0x3}}, {0x5, 0x46b0, {0x0, 0x5}}, {0x59b4, 0x5dd, {0x3, 0x8000}}, {0x36, 0x800, {0x3, 0x2}}, {0x2, 0x0, {0x0, 0xffffffff}}, {0x1, 0xff36, {0x3, 0x4}}, {0x3, 0x5, {0x2, 0x7}}, {0xfff9, 0xff, {0x3, 0x6}}, {0x3, 0x2, {0x0, 0x70}}, {0x100, 0x400, {0x2, 0xfffffffb}}, {0x0, 0x101, {0x1, 0x7}}, {0x0, 0x3, {0x2, 0x80000001}}, {0x5, 0xff, {0x3, 0x2}}, {0x1f, 0xe3d, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xab70}, 0x1, 0xe4, 0x9, 0x3, 0x11, 'syz0\x00', "ea894f5d9fe629e16b40764d5f66a46707e0cf76d710bae4574e11652be89019", "f63b4abc8be8428934199be32725f2e73098113a8b97ed3e4585971cc05a7cc9", [{0xac4, 0x7, {0x2}}, {0x101, 0x2d44, {0x0, 0x8a}}, {0x6, 0x9, {0x2, 0x12}}, {0x401, 0x5, {0x2, 0x8}}, {0x8001, 0x80, {0x3, 0xff}}, {0x3f, 0x0, {0x0, 0x7fff}}, {0x6, 0x3, {0x3, 0xfffffffa}}, {0x0, 0x7, {0x0, 0x3}}, {0xf8fd, 0x6, {0x3, 0x1}}, {0x100, 0x72, {0x3, 0x7}}, {0x8, 0xfe00, {0x3, 0x7fffffff}}, {0x5, 0x8, {0x2, 0x5ec}}, {0x41, 0x1, {0x2, 0x56}}, {0x7, 0x4, {0x0, 0x9}}, {0x3b, 0x80, {0x1, 0x1000}}, {0xfe01, 0x400, {0x0, 0x10001}}, {0x4, 0x2, {0x3, 0xc89}}, {0x4, 0x1f, {0x3, 0x6}}, {0x5, 0xfff, {0x3, 0x4}}, {0xcb, 0x5, {0x0, 0x3f}}, {0x8c5d, 0x100, {0x0, 0x2}}, {0x1ff, 0x77, {0x3, 0x3}}, {0xa0, 0x7fff, {0x1, 0xef0}}, {0x20, 0x20, {0x1, 0x6}}, {0xdf1, 0x9, {0x1, 0x71a}}, {0x2, 0x4, {0x2, 0x60}}, {0x8, 0x6, {0x3, 0xd64}}, {0xffff, 0x7, {0x0, 0x3}}, {0x8, 0x4, {0x1, 0x1}}, {0x1f, 0x947, {0x2, 0xfffffffe}}, {0x2, 0x5, {0x2, 0xfffffff7}}, {0x33d6, 0x6, {0x3, 0x10001}}, {0x7, 0xff, {0x0, 0x1c0}}, {0x6, 0xfff8, {0x3, 0x800}}, {0x80e, 0x1f, {0x1, 0x8}}, {0x6, 0x2, {0x0, 0x7f}}, {0x5, 0x4000, {0x3, 0x1aee}}, {0x0, 0xffff, {0x3, 0x62bc}}, {0x6, 0x9, {0x0, 0x9}}, {0x101, 0x3f, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x2, 0x5, 0x0, 0x957c, 0x18, 'syz1\x00', "793c9990c0c9d714d41d560f4a7ad69caf57908b1990c215ab697adcc62959ac", "d8a48758fb1bed665b67bace5a5e9c9f3b0f144cb84e514222c80785b10a31dd", [{0x3, 0x3, {0x3}}, {0xfffa, 0x0, {0x2, 0x3ff}}, {0x9, 0x80, {0x1, 0xffffffff}}, {0x9, 0x3f, {0x2, 0x7f}}, {0x1, 0xac8a, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x4}}, {0x5, 0x20, {0x1, 0x3}}, {0xf77, 0x9, {0x2, 0x7}}, {0x1, 0x6, {0x0, 0x6}}, {0x1, 0x7ff, {0x0, 0xb66}}, {0x6, 0x7fff, {0x2, 0x7}}, {0x6, 0x8, {0x0, 0x2}}, {0x1, 0x0, {0x1, 0xfff}}, {0x8, 0x7, {0x2, 0x56}}, {0x5, 0x2, {0x3, 0x101}}, {0x19d, 0xe9a, {0x3, 0x3}}, {0x4, 0x7, {0x3, 0x3}}, {0x1000, 0x1ff, {0x2}}, {0x2, 0x2, {0x2, 0xfb3}}, {0x7, 0x8, {0x2, 0x8}}, {0x3, 0x4, {0x0, 0xfb}}, {0x7fff, 0x101, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0x80000001}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8, {0x0, 0x80000000}}, {0x5, 0x3, {0x3, 0x6}}, {0x2, 0x20e5, {0x3, 0x7}}, {0x800, 0x0, {0x0, 0x7f}}, {0x2, 0x4, {0x3, 0xba55c172}}, {0x9, 0x0, {0x0, 0x3}}, {0x6, 0x7, {0x2, 0x3ff}}, {0x7fff, 0x6, {0x1, 0x9}}, {0x0, 0x0, {0x0, 0x7f}}, {0x3, 0x2, {0x3, 0x1}}, {0x5, 0x8, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x8001}}, {0x8, 0x8, {0x2, 0x3}}, {0xd477, 0x100, {0x1, 0x4}}, {0x7f91, 0x7, {0x1, 0x9}}, {0x0, 0x8, {0x0, 0x20}}]}}}, {{0x254, 0x1, {{0x3, 0x800}, 0x20, 0x56, 0x3, 0x2, 0x17, 'syz0\x00', "b75e8c81c7208337f8098c5cc5040ad2b6be139db70a087ac2705260a0cb18a6", "835f001112b3ec6072ab92662b6fe72ce5529d8f2a7c03789809c48a7989a6bd", [{0x0, 0x5, {0x0, 0x68}}, {0x9, 0x401, {0x1, 0x3f}}, {0x3, 0x3, {0x3, 0x20}}, {0x1, 0x9, {0x3, 0x627}}, {0x1, 0xc32, {0x1, 0x5}}, {0x4, 0x6, {0x2, 0x1000}}, {0x8000, 0x3, {0x3, 0x7}}, {0x8, 0x7fff, {0x2, 0x6}}, {0x0, 0x7f, {0x3}}, {0x1, 0x5, {0x0, 0x7fffffff}}, {0x1, 0x3, {0x3, 0x7}}, {0x8, 0x7, {0x2, 0x5}}, {0x2, 0x4, {0x2, 0x8}}, {0x4, 0x0, {0x0, 0x98c}}, {0x0, 0x1, {0x3, 0xfffffffd}}, {0xb3, 0x400, {0x0, 0xf2}}, {0x8, 0x2, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x3}}, {0x4, 0x1, {0x3, 0x6}}, {0x1, 0x58, {0x2, 0x9}}, {0x80, 0x101, {0x2, 0x620cab00}}, {0x9, 0x401}, {0x1, 0xff, {0x3, 0x826}}, {0x0, 0x100, {0x2, 0x3}}, {0x7, 0x5, {0x3, 0x80000000}}, {0x401, 0x800, {0x2, 0xf53}}, {0x390, 0xffff, {0x0, 0x9}}, {0x8000, 0x0, {0x2, 0x9}}, {0x6, 0x7, {0x2, 0x90}}, {0x250, 0x1, {0x1, 0x7ff}}, {0x8c, 0x40, {0x1, 0xfffffffa}}, {0xaf1, 0x7, {0x2, 0x6}}, {0x0, 0x2c2, {0x0, 0x7f}}, {0x56, 0x8000, {0x2, 0x3ff}}, {0x1ff, 0x5, {0x2, 0x8}}, {0xfc, 0x8, {0x2, 0x20}}, {0x0, 0xff, {0x2, 0x1}}, {0x401, 0x3bf6, {0x3, 0x75}}, {0x2, 0x1000, {0x2, 0xca}}, {0x0, 0x5, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x9, 0xa2, 0x9, 0x8001, 0x23, 'syz0\x00', "a84e80ba2a3cd9a51c96e14addfdbb6806a89501e46398c648b7bcc470acebf0", "c08e4ff01a75dd52186e1d732368a9a993cd4554d8d40c643a81518281eac2cf", [{0x7, 0x6, {0x0, 0x7}}, {0x9, 0x0, {0x3, 0x4}}, {0x98, 0x8, {0x0, 0x6}}, {0x3f, 0x3f, {0x1, 0x4}}, {0x1c00, 0x1, {0x1, 0x8}}, {0x7, 0x101, {0x0, 0xf2}}, {0x0, 0x0, {0x3, 0x100}}, {0x2, 0x1, {0x0, 0x8700}}, {0x1, 0x6, {0x3}}, {0x56, 0x5, {0x3, 0x6}}, {0x1, 0x8, {0x0, 0x200}}, {0x9, 0x1, {0x3}}, {0x3, 0x8, {0x3}}, {0x9, 0xfff8, {0x3, 0x3}}, {0x2, 0x2, {0x1, 0x7}}, {0x7fff, 0x8001, {0x2, 0x347b}}, {0x8, 0x3ff, {0x2}}, {0x0, 0x7fff, {0x0, 0x6}}, {0xe, 0xfbff, {0x0, 0x5}}, {0x2, 0x488, {0x0, 0xff}}, {0x8, 0xe81, {0x3, 0x5}}, {0x0, 0x8000, {0x3, 0x2000000}}, {0xd956, 0x0, {0x2, 0x3465}}, {0x9, 0x1, {0x1, 0x80000000}}, {0x80, 0x8, {0x3, 0x101}}, {0x80, 0x9, {0x0, 0x1632cf2}}, {0x80, 0x3, {0x3, 0x2}}, {0x1, 0xff, {0x3, 0x2}}, {0x7, 0xc25, {0x1, 0x5}}, {0xac67, 0x0, {0x2, 0x9}}, {0x98, 0x100, {0x2, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x4, 0x5887, {0x0, 0x7f}}, {0x5, 0xe6, {0x2, 0x9}}, {0x6, 0x5, {0x0, 0x59}}, {0x2, 0x2, {0x0, 0x2}}, {0x3, 0xd537, {0x3, 0x28ea}}, {0xffff, 0x1, {0x1, 0x1}}, {0x397f, 0x11f5, {0x1, 0xb7e}}, {0x1500, 0x7, {0x1, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x100}, 0x2, 0xfd, 0x0, 0xd80c, 0x3, 'syz1\x00', "e9db5a976a179037e784433b8d8e804f11767359149e6fb73f472e2cdfda8f66", "06dd87f70346abb51d61bd6ce589641bbe2e888940f0df0731833c7d9d92e606", [{0x7ac7, 0x100, {0x1, 0x57c8}}, {0xe0a8, 0x7, {0x3}}, {0xfffe, 0x1da, {0x1, 0x40}}, {0x3b4e, 0x7ff, {0x3, 0x9}}, {0x8000, 0x9, {0x3, 0xa7c}}, {0x4, 0x0, {0x2, 0x2}}, {0x9e, 0x0, {0x3, 0x48}}, {0x100, 0x3f, {0x2, 0x8}}, {0x40, 0x4, {0x1, 0x7}}, {0x100, 0x200, {0x3, 0xffff8001}}, {0x5, 0x7f, {0x2, 0x6}}, {0x100, 0x6}, {0x1ff, 0x3, {0x1, 0x40}}, {0x19f1, 0x8, {0x1, 0x6}}, {0x1a9, 0x5, {0x2, 0xfffffffe}}, {0x9, 0x6, {0x2, 0x9}}, {0x2, 0xf801, {0x1, 0x6}}, {0xc, 0x7, {0x2, 0x6}}, {0x0, 0x2, {0x2, 0x200}}, {0x6, 0x9, {0x3, 0x5}}, {0x0, 0xdd, {0x1, 0x7fffffff}}, {0x401, 0x3, {0x1, 0x4974c965}}, {0x8, 0x1, {0x0, 0x1}}, {0xcd, 0xbbd, {0x0, 0x8}}, {0xff, 0x9b, {0x2, 0x8}}, {0x1f, 0x8001, {0x1, 0x5}}, {0x74a5, 0xe2c0, {0x3, 0xa9}}, {0xfff, 0x1, {0x0, 0x9}}, {0xff9d, 0x1, {0x0, 0xffffffe1}}, {0x5, 0x101, {0x2, 0x3f8b}}, {0x5, 0x9, {0x3, 0x5}}, {0x81, 0x400, {0x2, 0x8001}}, {0x2, 0x9, {0x3, 0x101}}, {0xffff, 0x7, {0x2}}, {0xfb, 0x6, {0x0, 0x3220}}, {0xfe00, 0x8, {0x0, 0x9000000}}, {0x6, 0x2, {0x3, 0x1000}}, {0x7, 0x3, {0x0, 0x4}}, {0x1f, 0x6, {0x3, 0x7}}, {0x6, 0x0, {0x0, 0x20}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x4, 0x6, 0x5, 0x6, 0x1f, 'syz1\x00', "322d0c6de60a81dcb01b22dc0631910feae7ecfc807f222dd903bc04ff8c9b1e", "e9cbfcb75b7845bf5a7ae68ade68542a848f956abc36d03deba23a8c3fe43c9a", [{0x9, 0x8, {0x2, 0x10000}}, {0x7fff, 0x51, {0x2, 0x2}}, {0x3, 0x1800, {0x0, 0x1}}, {0x200, 0x3f, {0x1, 0x5}}, {0xfff9, 0xb4, {0x2, 0x7}}, {0x8, 0x4, {0x3, 0x38e4}}, {0x3, 0x0, {0x0, 0x7}}, {0x769d, 0x51, {0x2, 0x5}}, {0x40, 0x84, {0x1, 0xc3bc}}, {0x401, 0xfff, {0x2, 0x1fc0000}}, {0x2, 0x401, {0x2, 0x4}}, {0x5, 0x42f1, {0x3, 0xae6}}, {0x5, 0x0, {0x0, 0x200}}, {0x6, 0x5, {0x3}}, {0x7, 0x8, {0x2, 0x6}}, {0x1, 0xfc00, {0x0, 0x7}}, {0x40, 0x62, {0x0, 0x6}}, {0x31, 0x6, {0x0, 0xf08}}, {0x401, 0x0, {0x0, 0x2}}, {0x200, 0x401, {0x2, 0x4}}, {0x1, 0x40, {0x2, 0x5}}, {0x81, 0xf000, {0x3, 0x2}}, {0x9, 0x7, {0x0, 0x9}}, {0xfffa, 0x3ff, {0x2, 0x80000001}}, {0x9, 0x0, {0x1, 0x8}}, {0xad, 0x3, {0x3, 0xb9}}, {0xfff8, 0xffff, {0x1, 0x8000}}, {0xffc1, 0x5, {0x0, 0x5}}, {0x6, 0x662a, {0x0, 0x7f}}, {0x7ff, 0x717, {0x3, 0x3f}}, {0x1000, 0xf7a, {0x0, 0x729}}, {0x3bdf, 0x8, {0x3, 0x937}}, {0x79d, 0x1ff, {0x3}}, {0x7fff, 0x2, {0x1, 0x8}}, {0x8, 0xa4, {0x1, 0x1}}, {0x101, 0x3f, {0x2, 0x5}}, {0xd, 0x17d, {0x0, 0x3ff}}, {0x80, 0x7, {0x0, 0x2}}, {0x2, 0x3, {0x2, 0xd6b}}, {0xffff, 0xcd04, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x80, 0x40, 0xd5b, 0x8, 0x27, 'syz0\x00', "be91aec009f49419936eda0bed38e7c4efa2693f37b8fac29bc26bfec86cf035", "4eec35e8d3da60630a1d6b5f92bcfec38d32c1936ed2692f942999ee5d56799e", [{0x1, 0x7fff, {0x3, 0x20}}, {0x8001, 0x0, {0x1, 0x4}}, {0x4, 0x7d, {0x2, 0x8000}}, {0x9, 0x3, {0xb3623479d03df831, 0x7f}}, {0x8, 0xfe00, {0x0, 0xefc}}, {0x20, 0x9214, {0x0, 0xfff}}, {0x3, 0x8, {0x2, 0x1000}}, {0x0, 0x9f, {0x2, 0xed6}}, {0x1, 0x7f, {0x2, 0x1ff}}, {0xff, 0x8000, {0x2, 0x8}}, {0xd3de, 0x9, {0x2, 0x2}}, {0x3, 0xffff, {0x2, 0x80000001}}, {0x7ff, 0x4, {0x1, 0x80}}, {0x4800, 0x5, {0x0, 0x5fd}}, {0x6, 0x1, {0x3}}, {0x3ff, 0x9, {0x0, 0x80000001}}, {0x624, 0x8d6, {0x0, 0x7}}, {0x3ff, 0x20, {0x2, 0x400}}, {0xd172, 0x8, {0x3, 0x10001}}, {0x7, 0x3ff, {0x3, 0x2}}, {0xee, 0xfffd, {0x1, 0x7}}, {0x1, 0x1ff, {0x2, 0x3}}, {0xfe01, 0x3, {0x0, 0x3ff}}, {0x6, 0xffff, {0x1}}, {0x5, 0x39, {0x0, 0x5}}, {0x1, 0x9, {0x0, 0xef4}}, {0x1, 0x1000, {0x1, 0xf4c2}}, {0x928, 0x9, {0x1, 0x8}}, {0xfc01, 0xff, {0x0, 0x5}}, {0x1, 0x7, {0x0, 0x1}}, {0x6, 0x1, {0x3, 0x4}}, {0x8fa, 0x5, {0x3, 0x8001}}, {0x8, 0x1, {0x3, 0x7}}, {0x9, 0x2, {0x1, 0x2}}, {0x7, 0xd12, {0x2, 0x6}}, {0x80, 0xc9b, {0x0, 0x566}}, {0x12, 0x2, {0x3, 0x9}}, {0x7, 0x9, {0x2, 0x5}}, {0x0, 0x400, {0x1, 0x7}}, {0x2, 0x9, {0x0, 0x1}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000840}, 0x91) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000480), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) pipe(&(0x7f0000000a00)) pipe(&(0x7f0000000a00)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000580)={r1, 0x40000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20600, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000300)={0x1000, 0xf000, 0x64, 0xa, 0x20}) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x108) 11:55:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:36 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f0000000040)) dup2(r0, r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:36 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x0, 0x2d, 0x10, 0x7, 0xa, 0x7, 0x2, 0xcc, 0x1}}) 11:55:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 429.964493] erofs: read_super, device -> /dev/nbd0 11:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 429.987872] erofs: options -> (null) [ 429.995885] block nbd0: Attempted send on invalid socket [ 430.001519] print_req_error: I/O error, dev nbd0, sector 0 [ 430.025039] erofs: cannot read erofs superblock 11:55:37 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xc61) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @local}}) 11:55:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB='\x00'/12, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/3906], @ANYPTR, @ANYBLOB='\x00'/18]) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x100000001) shmdt(0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x208000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000001780)={0x1508, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x5}, 0x1f, 0x80, 0x101, 0x2, 0x6, 'syz1\x00', "d4e8d79666d0af98b2d5790c4c5794ceceefd04a78de1b051027e0c26578f720", "b7357c241afa0f1606d14efea874624f0a3753d37dcc108b5ffe4d0e2a9336d0", [{0x2, 0xad, {0x1, 0x500}}, {0x7, 0x2, {0x1, 0x4}}, {0x800, 0x4, {0x0, 0x81}}, {0x7ff, 0x7, {0x0, 0x5}}, {0x1000, 0x6, {0x1, 0xe949}}, {0x8, 0x0, {0x0, 0x3}}, {0x4, 0x1, {0x1, 0x4}}, {0x7f, 0x6, {0x0, 0x2}}, {0x3ff, 0x1, {0xa6bc36be7f0b028d, 0x3}}, {0x20, 0x8, {0x1, 0x8}}, {0x6, 0xff9b, {0x2, 0x7}}, {0x6, 0xff, {0x2, 0x3b}}, {0x2, 0x1, {0x1, 0x800}}, {0x8, 0x42, {0x1, 0xffffa257}}, {0x0, 0xff7f, {0x3, 0x6}}, {0x2, 0x1000, {0x0, 0xffff}}, {0x1, 0xff, {0x2, 0x200}}, {0x3, 0x4, {0x0, 0x1f9c00}}, {0x1, 0x625, {0x0, 0x7}}, {0x200, 0xc019, {0x2, 0x1}}, {0x0, 0x8, {0x1, 0x80000001}}, {0x2, 0x100, {0x0, 0xc7}}, {0x6, 0x1f, {0x1, 0xffff}}, {0x200, 0x2, {0x3}}, {0x88a, 0x8, {0x1, 0x80000000}}, {0x7, 0x1, {0x2, 0x4}}, {0x101, 0x8, {0x1, 0xe21c}}, {0x401, 0x8001, {0x3, 0x101}}, {0xa762, 0x3ff, {0x2, 0xff}}, {0x0, 0x8, {0x1, 0x4}}, {0x3, 0x800, {0x1, 0x1f878ecb}}, {0x200, 0xb44, {0x3, 0x800}}, {0x5, 0x2, {0x2, 0x6}}, {0x101, 0xbad3, {0x2, 0x17}}, {0x7fff, 0x6}, {0x5, 0x8001, {0x3, 0x7}}, {0x8, 0x2, {0x1}}, {0x9, 0x6e5, {0x3}}, {0x401, 0x5, {0x3, 0x2}}, {0xfff8, 0x3f, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x10, 0x5, 0x55c, 0x0, 0x18, 'syz0\x00', "793af8b2ea26391ab2ace253f68099897c138fb7f9f9b16f7776d6b8e4aa6d99", "e764eac6809eef5c47b79bbe747a18bda67435df132023e3fc5488c2f9a0bf84", [{0x3ff, 0xfc0, {0x2, 0x6}}, {0xfeff, 0x81, {0x3, 0x9}}, {0x0, 0xffc0, {0x2, 0x8}}, {0x8, 0x197e, {0x0, 0xa67}}, {0xfc00, 0x9, {0x3}}, {0x73f, 0x3f, {0x3, 0x292abf07}}, {0x0, 0x0, {0x2, 0x6}}, {0x1, 0x0, {0x3, 0xe4b}}, {0x3, 0x0, {0x1, 0x1}}, {0x1ff, 0x4, {0x1, 0x3}}, {0x100, 0x6, {0x2, 0x3}}, {0x800, 0x4, {0x0, 0x1}}, {0x0, 0x800, {0x0, 0x8001}}, {0xa6f7, 0xffff, {0x2, 0x1}}, {0x7, 0x400, {0x0, 0x1}}, {0x1, 0x1ff, {0x0, 0x12}}, {0x4, 0x3ff, {0x0, 0x1000}}, {0xfffd, 0x7, {0x3, 0xc650}}, {0x9f, 0x5, {0x1, 0x9}}, {0x3, 0x7ff, {0x3, 0x3}}, {0x7, 0x8b6, {0x2, 0x1ff}}, {0x8, 0x3, {0x2, 0xfffff5d8}}, {0x339e, 0xbf7, {0x2, 0x2}}, {0x7ff, 0x2, {0x3, 0x1}}, {0x17, 0x7ff, {0x3, 0x6}}, {0x401, 0x0, {0x1, 0x78}}, {0x6, 0x589e, {0x3}}, {0x5, 0x46b0, {0x0, 0x5}}, {0x59b4, 0x5dd, {0x3, 0x8000}}, {0x36, 0x800, {0x3, 0x2}}, {0x2, 0x0, {0x0, 0xffffffff}}, {0x1, 0xff36, {0x3, 0x4}}, {0x3, 0x5, {0x2, 0x7}}, {0xfff9, 0xff, {0x3, 0x6}}, {0x3, 0x2, {0x0, 0x70}}, {0x100, 0x400, {0x2, 0xfffffffb}}, {0x0, 0x101, {0x1, 0x7}}, {0x0, 0x3, {0x2, 0x80000001}}, {0x5, 0xff, {0x3, 0x2}}, {0x1f, 0xe3d, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xab70}, 0x1, 0xe4, 0x9, 0x3, 0x11, 'syz0\x00', "ea894f5d9fe629e16b40764d5f66a46707e0cf76d710bae4574e11652be89019", "f63b4abc8be8428934199be32725f2e73098113a8b97ed3e4585971cc05a7cc9", [{0xac4, 0x7, {0x2}}, {0x101, 0x2d44, {0x0, 0x8a}}, {0x6, 0x9, {0x2, 0x12}}, {0x401, 0x5, {0x2, 0x8}}, {0x8001, 0x80, {0x3, 0xff}}, {0x3f, 0x0, {0x0, 0x7fff}}, {0x6, 0x3, {0x3, 0xfffffffa}}, {0x0, 0x7, {0x0, 0x3}}, {0xf8fd, 0x6, {0x3, 0x1}}, {0x100, 0x72, {0x3, 0x7}}, {0x8, 0xfe00, {0x3, 0x7fffffff}}, {0x5, 0x8, {0x2, 0x5ec}}, {0x41, 0x1, {0x2, 0x56}}, {0x7, 0x4, {0x0, 0x9}}, {0x3b, 0x80, {0x1, 0x1000}}, {0xfe01, 0x400, {0x0, 0x10001}}, {0x4, 0x2, {0x3, 0xc89}}, {0x4, 0x1f, {0x3, 0x6}}, {0x5, 0xfff, {0x3, 0x4}}, {0xcb, 0x5, {0x0, 0x3f}}, {0x8c5d, 0x100, {0x0, 0x2}}, {0x1ff, 0x77, {0x3, 0x3}}, {0xa0, 0x7fff, {0x1, 0xef0}}, {0x20, 0x20, {0x1, 0x6}}, {0xdf1, 0x9, {0x1, 0x71a}}, {0x2, 0x4, {0x2, 0x60}}, {0x8, 0x6, {0x3, 0xd64}}, {0xffff, 0x7, {0x0, 0x3}}, {0x8, 0x4, {0x1, 0x1}}, {0x1f, 0x947, {0x2, 0xfffffffe}}, {0x2, 0x5, {0x2, 0xfffffff7}}, {0x33d6, 0x6, {0x3, 0x10001}}, {0x7, 0xff, {0x0, 0x1c0}}, {0x6, 0xfff8, {0x3, 0x800}}, {0x80e, 0x1f, {0x1, 0x8}}, {0x6, 0x2, {0x0, 0x7f}}, {0x5, 0x4000, {0x3, 0x1aee}}, {0x0, 0xffff, {0x3, 0x62bc}}, {0x6, 0x9, {0x0, 0x9}}, {0x101, 0x3f, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x2, 0x5, 0x0, 0x957c, 0x18, 'syz1\x00', "793c9990c0c9d714d41d560f4a7ad69caf57908b1990c215ab697adcc62959ac", "d8a48758fb1bed665b67bace5a5e9c9f3b0f144cb84e514222c80785b10a31dd", [{0x3, 0x3, {0x3}}, {0xfffa, 0x0, {0x2, 0x3ff}}, {0x9, 0x80, {0x1, 0xffffffff}}, {0x9, 0x3f, {0x2, 0x7f}}, {0x1, 0xac8a, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x4}}, {0x5, 0x20, {0x1, 0x3}}, {0xf77, 0x9, {0x2, 0x7}}, {0x1, 0x6, {0x0, 0x6}}, {0x1, 0x7ff, {0x0, 0xb66}}, {0x6, 0x7fff, {0x2, 0x7}}, {0x6, 0x8, {0x0, 0x2}}, {0x1, 0x0, {0x1, 0xfff}}, {0x8, 0x7, {0x2, 0x56}}, {0x5, 0x2, {0x3, 0x101}}, {0x19d, 0xe9a, {0x3, 0x3}}, {0x4, 0x7, {0x3, 0x3}}, {0x1000, 0x1ff, {0x2}}, {0x2, 0x2, {0x2, 0xfb3}}, {0x7, 0x8, {0x2, 0x8}}, {0x3, 0x4, {0x0, 0xfb}}, {0x7fff, 0x101, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0x80000001}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8, {0x0, 0x80000000}}, {0x5, 0x3, {0x3, 0x6}}, {0x2, 0x20e5, {0x3, 0x7}}, {0x800, 0x0, {0x0, 0x7f}}, {0x2, 0x4, {0x3, 0xba55c172}}, {0x9, 0x0, {0x0, 0x3}}, {0x6, 0x7, {0x2, 0x3ff}}, {0x7fff, 0x6, {0x1, 0x9}}, {0x0, 0x0, {0x0, 0x7f}}, {0x3, 0x2, {0x3, 0x1}}, {0x5, 0x8, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x8001}}, {0x8, 0x8, {0x2, 0x3}}, {0xd477, 0x100, {0x1, 0x4}}, {0x7f91, 0x7, {0x1, 0x9}}, {0x0, 0x8, {0x0, 0x20}}]}}}, {{0x254, 0x1, {{0x3, 0x800}, 0x20, 0x56, 0x3, 0x2, 0x17, 'syz0\x00', "b75e8c81c7208337f8098c5cc5040ad2b6be139db70a087ac2705260a0cb18a6", "835f001112b3ec6072ab92662b6fe72ce5529d8f2a7c03789809c48a7989a6bd", [{0x0, 0x5, {0x0, 0x68}}, {0x9, 0x401, {0x1, 0x3f}}, {0x3, 0x3, {0x3, 0x20}}, {0x1, 0x9, {0x3, 0x627}}, {0x1, 0xc32, {0x1, 0x5}}, {0x4, 0x6, {0x2, 0x1000}}, {0x8000, 0x3, {0x3, 0x7}}, {0x8, 0x7fff, {0x2, 0x6}}, {0x0, 0x7f, {0x3}}, {0x1, 0x5, {0x0, 0x7fffffff}}, {0x1, 0x3, {0x3, 0x7}}, {0x8, 0x7, {0x2, 0x5}}, {0x2, 0x4, {0x2, 0x8}}, {0x4, 0x0, {0x0, 0x98c}}, {0x0, 0x1, {0x3, 0xfffffffd}}, {0xb3, 0x400, {0x0, 0xf2}}, {0x8, 0x2, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x3}}, {0x4, 0x1, {0x3, 0x6}}, {0x1, 0x58, {0x2, 0x9}}, {0x80, 0x101, {0x2, 0x620cab00}}, {0x9, 0x401}, {0x1, 0xff, {0x3, 0x826}}, {0x0, 0x100, {0x2, 0x3}}, {0x7, 0x5, {0x3, 0x80000000}}, {0x401, 0x800, {0x2, 0xf53}}, {0x390, 0xffff, {0x0, 0x9}}, {0x8000, 0x0, {0x2, 0x9}}, {0x6, 0x7, {0x2, 0x90}}, {0x250, 0x1, {0x1, 0x7ff}}, {0x8c, 0x40, {0x1, 0xfffffffa}}, {0xaf1, 0x7, {0x2, 0x6}}, {0x0, 0x2c2, {0x0, 0x7f}}, {0x56, 0x8000, {0x2, 0x3ff}}, {0x1ff, 0x5, {0x2, 0x8}}, {0xfc, 0x8, {0x2, 0x20}}, {0x0, 0xff, {0x2, 0x1}}, {0x401, 0x3bf6, {0x3, 0x75}}, {0x2, 0x1000, {0x2, 0xca}}, {0x0, 0x5, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x9, 0xa2, 0x9, 0x8001, 0x23, 'syz0\x00', "a84e80ba2a3cd9a51c96e14addfdbb6806a89501e46398c648b7bcc470acebf0", "c08e4ff01a75dd52186e1d732368a9a993cd4554d8d40c643a81518281eac2cf", [{0x7, 0x6, {0x0, 0x7}}, {0x9, 0x0, {0x3, 0x4}}, {0x98, 0x8, {0x0, 0x6}}, {0x3f, 0x3f, {0x1, 0x4}}, {0x1c00, 0x1, {0x1, 0x8}}, {0x7, 0x101, {0x0, 0xf2}}, {0x0, 0x0, {0x3, 0x100}}, {0x2, 0x1, {0x0, 0x8700}}, {0x1, 0x6, {0x3}}, {0x56, 0x5, {0x3, 0x6}}, {0x1, 0x8, {0x0, 0x200}}, {0x9, 0x1, {0x3}}, {0x3, 0x8, {0x3}}, {0x9, 0xfff8, {0x3, 0x3}}, {0x2, 0x2, {0x1, 0x7}}, {0x7fff, 0x8001, {0x2, 0x347b}}, {0x8, 0x3ff, {0x2}}, {0x0, 0x7fff, {0x0, 0x6}}, {0xe, 0xfbff, {0x0, 0x5}}, {0x2, 0x488, {0x0, 0xff}}, {0x8, 0xe81, {0x3, 0x5}}, {0x0, 0x8000, {0x3, 0x2000000}}, {0xd956, 0x0, {0x2, 0x3465}}, {0x9, 0x1, {0x1, 0x80000000}}, {0x80, 0x8, {0x3, 0x101}}, {0x80, 0x9, {0x0, 0x1632cf2}}, {0x80, 0x3, {0x3, 0x2}}, {0x1, 0xff, {0x3, 0x2}}, {0x7, 0xc25, {0x1, 0x5}}, {0xac67, 0x0, {0x2, 0x9}}, {0x98, 0x100, {0x2, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x4, 0x5887, {0x0, 0x7f}}, {0x5, 0xe6, {0x2, 0x9}}, {0x6, 0x5, {0x0, 0x59}}, {0x2, 0x2, {0x0, 0x2}}, {0x3, 0xd537, {0x3, 0x28ea}}, {0xffff, 0x1, {0x1, 0x1}}, {0x397f, 0x11f5, {0x1, 0xb7e}}, {0x1500, 0x7, {0x1, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x100}, 0x2, 0xfd, 0x0, 0xd80c, 0x3, 'syz1\x00', "e9db5a976a179037e784433b8d8e804f11767359149e6fb73f472e2cdfda8f66", "06dd87f70346abb51d61bd6ce589641bbe2e888940f0df0731833c7d9d92e606", [{0x7ac7, 0x100, {0x1, 0x57c8}}, {0xe0a8, 0x7, {0x3}}, {0xfffe, 0x1da, {0x1, 0x40}}, {0x3b4e, 0x7ff, {0x3, 0x9}}, {0x8000, 0x9, {0x3, 0xa7c}}, {0x4, 0x0, {0x2, 0x2}}, {0x9e, 0x0, {0x3, 0x48}}, {0x100, 0x3f, {0x2, 0x8}}, {0x40, 0x4, {0x1, 0x7}}, {0x100, 0x200, {0x3, 0xffff8001}}, {0x5, 0x7f, {0x2, 0x6}}, {0x100, 0x6}, {0x1ff, 0x3, {0x1, 0x40}}, {0x19f1, 0x8, {0x1, 0x6}}, {0x1a9, 0x5, {0x2, 0xfffffffe}}, {0x9, 0x6, {0x2, 0x9}}, {0x2, 0xf801, {0x1, 0x6}}, {0xc, 0x7, {0x2, 0x6}}, {0x0, 0x2, {0x2, 0x200}}, {0x6, 0x9, {0x3, 0x5}}, {0x0, 0xdd, {0x1, 0x7fffffff}}, {0x401, 0x3, {0x1, 0x4974c965}}, {0x8, 0x1, {0x0, 0x1}}, {0xcd, 0xbbd, {0x0, 0x8}}, {0xff, 0x9b, {0x2, 0x8}}, {0x1f, 0x8001, {0x1, 0x5}}, {0x74a5, 0xe2c0, {0x3, 0xa9}}, {0xfff, 0x1, {0x0, 0x9}}, {0xff9d, 0x1, {0x0, 0xffffffe1}}, {0x5, 0x101, {0x2, 0x3f8b}}, {0x5, 0x9, {0x3, 0x5}}, {0x81, 0x400, {0x2, 0x8001}}, {0x2, 0x9, {0x3, 0x101}}, {0xffff, 0x7, {0x2}}, {0xfb, 0x6, {0x0, 0x3220}}, {0xfe00, 0x8, {0x0, 0x9000000}}, {0x6, 0x2, {0x3, 0x1000}}, {0x7, 0x3, {0x0, 0x4}}, {0x1f, 0x6, {0x3, 0x7}}, {0x6, 0x0, {0x0, 0x20}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x4, 0x6, 0x5, 0x6, 0x1f, 'syz1\x00', "322d0c6de60a81dcb01b22dc0631910feae7ecfc807f222dd903bc04ff8c9b1e", "e9cbfcb75b7845bf5a7ae68ade68542a848f956abc36d03deba23a8c3fe43c9a", [{0x9, 0x8, {0x2, 0x10000}}, {0x7fff, 0x51, {0x2, 0x2}}, {0x3, 0x1800, {0x0, 0x1}}, {0x200, 0x3f, {0x1, 0x5}}, {0xfff9, 0xb4, {0x2, 0x7}}, {0x8, 0x4, {0x3, 0x38e4}}, {0x3, 0x0, {0x0, 0x7}}, {0x769d, 0x51, {0x2, 0x5}}, {0x40, 0x84, {0x1, 0xc3bc}}, {0x401, 0xfff, {0x2, 0x1fc0000}}, {0x2, 0x401, {0x2, 0x4}}, {0x5, 0x42f1, {0x3, 0xae6}}, {0x5, 0x0, {0x0, 0x200}}, {0x6, 0x5, {0x3}}, {0x7, 0x8, {0x2, 0x6}}, {0x1, 0xfc00, {0x0, 0x7}}, {0x40, 0x62, {0x0, 0x6}}, {0x31, 0x6, {0x0, 0xf08}}, {0x401, 0x0, {0x0, 0x2}}, {0x200, 0x401, {0x2, 0x4}}, {0x1, 0x40, {0x2, 0x5}}, {0x81, 0xf000, {0x3, 0x2}}, {0x9, 0x7, {0x0, 0x9}}, {0xfffa, 0x3ff, {0x2, 0x80000001}}, {0x9, 0x0, {0x1, 0x8}}, {0xad, 0x3, {0x3, 0xb9}}, {0xfff8, 0xffff, {0x1, 0x8000}}, {0xffc1, 0x5, {0x0, 0x5}}, {0x6, 0x662a, {0x0, 0x7f}}, {0x7ff, 0x717, {0x3, 0x3f}}, {0x1000, 0xf7a, {0x0, 0x729}}, {0x3bdf, 0x8, {0x3, 0x937}}, {0x79d, 0x1ff, {0x3}}, {0x7fff, 0x2, {0x1, 0x8}}, {0x8, 0xa4, {0x1, 0x1}}, {0x101, 0x3f, {0x2, 0x5}}, {0xd, 0x17d, {0x0, 0x3ff}}, {0x80, 0x7, {0x0, 0x2}}, {0x2, 0x3, {0x2, 0xd6b}}, {0xffff, 0xcd04, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x80, 0x40, 0xd5b, 0x8, 0x27, 'syz0\x00', "be91aec009f49419936eda0bed38e7c4efa2693f37b8fac29bc26bfec86cf035", "4eec35e8d3da60630a1d6b5f92bcfec38d32c1936ed2692f942999ee5d56799e", [{0x1, 0x7fff, {0x3, 0x20}}, {0x8001, 0x0, {0x1, 0x4}}, {0x4, 0x7d, {0x2, 0x8000}}, {0x9, 0x3, {0xb3623479d03df831, 0x7f}}, {0x8, 0xfe00, {0x0, 0xefc}}, {0x20, 0x9214, {0x0, 0xfff}}, {0x3, 0x8, {0x2, 0x1000}}, {0x0, 0x9f, {0x2, 0xed6}}, {0x1, 0x7f, {0x2, 0x1ff}}, {0xff, 0x8000, {0x2, 0x8}}, {0xd3de, 0x9, {0x2, 0x2}}, {0x3, 0xffff, {0x2, 0x80000001}}, {0x7ff, 0x4, {0x1, 0x80}}, {0x4800, 0x5, {0x0, 0x5fd}}, {0x6, 0x1, {0x3}}, {0x3ff, 0x9, {0x0, 0x80000001}}, {0x624, 0x8d6, {0x0, 0x7}}, {0x3ff, 0x20, {0x2, 0x400}}, {0xd172, 0x8, {0x3, 0x10001}}, {0x7, 0x3ff, {0x3, 0x2}}, {0xee, 0xfffd, {0x1, 0x7}}, {0x1, 0x1ff, {0x2, 0x3}}, {0xfe01, 0x3, {0x0, 0x3ff}}, {0x6, 0xffff, {0x1}}, {0x5, 0x39, {0x0, 0x5}}, {0x1, 0x9, {0x0, 0xef4}}, {0x1, 0x1000, {0x1, 0xf4c2}}, {0x928, 0x9, {0x1, 0x8}}, {0xfc01, 0xff, {0x0, 0x5}}, {0x1, 0x7, {0x0, 0x1}}, {0x6, 0x1, {0x3, 0x4}}, {0x8fa, 0x5, {0x3, 0x8001}}, {0x8, 0x1, {0x3, 0x7}}, {0x9, 0x2, {0x1, 0x2}}, {0x7, 0xd12, {0x2, 0x6}}, {0x80, 0xc9b, {0x0, 0x566}}, {0x12, 0x2, {0x3, 0x9}}, {0x7, 0x9, {0x2, 0x5}}, {0x0, 0x400, {0x1, 0x7}}, {0x2, 0x9, {0x0, 0x1}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000840}, 0x91) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000480), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) pipe(&(0x7f0000000a00)) pipe(&(0x7f0000000a00)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000580)={r1, 0x40000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20600, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000300)={0x1000, 0xf000, 0x64, 0xa, 0x20}) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x108) 11:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:37 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) get_thread_area(&(0x7f00000000c0)={0x3, 0x20000000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x0, 0x0) 11:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) [ 430.475761] block nbd0: Attempted send on invalid socket [ 430.481406] print_req_error: I/O error, dev nbd0, sector 0 [ 430.493858] FAT-fs (nbd0): unable to read boot sector 11:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:37 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000001000050700"/20, @ANYRES32, @ANYBLOB="5c485a392a10777df90004010000000000600012800e0001006970366772657461700000004c000280060002003f000000060003000700000008000100", @ANYRES32, @ANYBLOB="0800140000000000140006000000000000000000000000cc000000001400070000000000000000000000ffff00004727"], 0x80}}, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x26, 0x40000102, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@bcast, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) [ 430.744228] kauditd_printk_skb: 5 callbacks suppressed [ 430.744247] audit: type=1804 audit(1579953337.601:513): pid=29955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/168/bus" dev="sda1" ino=17391 res=1 11:55:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:37 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000640)={[0x1, 0x8, 0x3, 0x9a38, 0x0, 0x4, 0x4, 0x1f, 0x2, 0x2, 0x3, 0x3, 0x81, 0x5ef1, 0x4ad, 0xdbce, 0x0, 0x7f, 0x6, 0x5, 0x0, 0x0, 0x1, 0xf038, 0x3, 0x10000, 0x0, 0x0, 0x6, 0x3fffc, 0xfc, 0xea5, 0x2, 0x1, 0x33a4, 0x7ff, 0xc91f, 0x2, 0x1ff, 0x4, 0x6, 0x2, 0x5, 0x8, 0x3f, 0x100, 0x10000, 0xffffffff, 0x100, 0x8, 0x1, 0xffffffff, 0xfff, 0x0, 0x7, 0x7, 0x5, 0x7, 0x53, 0x101, 0x7, 0x5, 0x838, 0x200, 0x3, 0x3f, 0x2, 0x5, 0x2, 0x6, 0x401, 0x1, 0x8, 0x3d2, 0x1, 0x9, 0x0, 0x3, 0xfffffff9, 0x10001, 0x80, 0x5, 0x6, 0x0, 0x7, 0x2, 0xffffffff, 0xffff9db9, 0x52deab2a, 0x8, 0x2e1d, 0xfffffffa, 0x9, 0x7fff, 0xffff, 0x2, 0x1, 0x7, 0x8, 0x7f, 0x80, 0x4, 0x2, 0x2, 0x0, 0x7, 0x2, 0x3, 0x7fff, 0x91d, 0x93, 0x101, 0x9ee, 0x2, 0x40, 0x40, 0xffff, 0x100, 0x61, 0x2689d696, 0x1, 0x7, 0x4, 0x7, 0x3, 0x1, 0x2, 0x4, 0x1, 0xed, 0x8001, 0x400, 0x1f, 0x5, 0x80000001, 0x7f, 0x1, 0x1f, 0x1, 0x80000000, 0x62, 0x5, 0x2, 0x401, 0xff, 0x7, 0x7, 0x40, 0xfffffff9, 0x3, 0x4, 0x4, 0x4, 0x411, 0x7b35, 0x7, 0x5, 0x3, 0x0, 0x80, 0x3, 0x0, 0x101, 0xc7d, 0x139a, 0x2, 0x4, 0xd4, 0x3, 0xffffffde, 0x8a9d, 0x9563, 0x1, 0x8, 0x1, 0x0, 0x8001, 0xffffffff, 0xff, 0x4, 0x2, 0xfffffffc, 0x8553, 0x8, 0x8, 0x6efd, 0x5c, 0x7, 0x2, 0x8, 0x9, 0x1, 0x7, 0x5, 0x9, 0x7, 0xffffffff, 0xffff7fff, 0x800, 0x3f47, 0x9b, 0x8, 0x3, 0x100, 0x7, 0xffff, 0x4, 0x7fffffff, 0x2, 0x1, 0x3, 0x9, 0x7, 0xc02, 0x6, 0x200, 0x2, 0x1, 0x20, 0x0, 0x8, 0xd0e0, 0x8, 0xffff, 0xffff, 0x8, 0x8, 0x8, 0x1, 0x4, 0x9, 0x8, 0x8, 0xff, 0x3, 0x0, 0x3, 0x787, 0x2, 0x9, 0x9, 0x57, 0x9, 0xf0, 0x4, 0x8001, 0x2, 0x10001, 0xffff, 0x7, 0x4, 0x8, 0xffffffff, 0x0, 0x4a4cf1ba, 0x3ff, 0x1, 0x7, 0x7, 0x3, 0x4, 0x4, 0x4, 0x1, 0x1, 0x10000, 0x7fffffff, 0x98, 0x1f, 0x0, 0x9, 0x5, 0x4, 0xd60, 0x4, 0x40, 0x0, 0x203, 0x9671, 0xffffffcb, 0x1, 0x9, 0x7, 0xfff, 0x7fffffff, 0x53f4, 0xb0, 0x0, 0x9, 0x3ff, 0x400, 0x138a8913, 0x7, 0x5, 0x1, 0xfffffffe, 0x800, 0x0, 0x4, 0x40, 0x4, 0x8, 0x98e, 0x4, 0x8001, 0x0, 0x8, 0x80000000, 0x5, 0x66e5, 0x5, 0x0, 0xfffffff9, 0x3a5, 0x2, 0x9, 0x9, 0x7fffffff, 0x7, 0x200, 0x1, 0x8, 0x401, 0x8, 0x2, 0x8, 0x8000, 0x1f6, 0x0, 0x53063575, 0x6, 0x9, 0x94a, 0x9, 0x3, 0x7, 0x8000, 0xc4d, 0xb81, 0x0, 0xac, 0x5, 0x7fffffff, 0x1, 0x8, 0x1000, 0x7, 0x7, 0x3f, 0x1000, 0xfffffff7, 0x4, 0x5, 0xdf57, 0x9, 0xfffff694, 0x4, 0x81, 0x5, 0x54ef, 0x3, 0x3, 0x400, 0x80000001, 0x0, 0x81, 0xe0, 0x5, 0x20000, 0x0, 0x8, 0x2, 0x1, 0x6, 0x3, 0x6, 0xb5aa, 0x8, 0x5, 0x10001, 0x19, 0x9, 0x3, 0x4, 0x2f, 0x0, 0x0, 0x9, 0x8, 0x800, 0x58ef, 0x401, 0x3f, 0x1, 0x4e, 0x7, 0x4, 0x4, 0x6, 0x200, 0xeb1, 0x0, 0x1, 0x3, 0x636f, 0x0, 0x9, 0x80000001, 0x5, 0xffff, 0x6, 0x1, 0x1, 0x7, 0x9, 0x1, 0x6, 0x4, 0x20, 0xffff, 0x7, 0xfb9d, 0x100, 0xd3, 0x401, 0x7fffffff, 0x1, 0x1ff, 0x2, 0x80, 0x5, 0x0, 0x4, 0x0, 0x6, 0x7fffffff, 0x0, 0x85f, 0x4, 0x7, 0x29ead6db, 0x8, 0x0, 0x4, 0x3, 0x3f, 0x4, 0xdf99, 0x1, 0x217102fd, 0x6, 0x42, 0x200, 0x699, 0x8, 0x200, 0x4, 0x1, 0xbbec, 0x2, 0x1f1, 0xfffeffff, 0x0, 0x8001, 0x7f, 0xfffffffc, 0x100, 0x401, 0x7f, 0x1f, 0x5, 0x7fff, 0x9, 0x3, 0x0, 0x3, 0x1ff, 0x9d5, 0xfff, 0x7fffffff, 0x2, 0xffff0b35, 0x81, 0x4, 0x0, 0x1, 0x6, 0x5, 0x6, 0x7fffffff, 0x2, 0x4, 0x9, 0x100, 0x7fffffff, 0x100, 0x100, 0x3ff, 0x4, 0x0, 0x5, 0x74c, 0x9, 0xffff, 0xff, 0x477, 0x7ff, 0xffffffa4, 0x5, 0x2, 0x6, 0x3, 0x7fff, 0xfffffffa, 0x7, 0x4, 0x4, 0x5, 0xdd, 0xc3, 0x4, 0x5, 0x6, 0x2, 0x0, 0x1ffe0000, 0x74, 0xfffffeff, 0x2, 0x0, 0x81, 0x40, 0x0, 0x7, 0x1, 0x6, 0x9, 0x7ff, 0x200, 0x3ff, 0x3, 0xfff, 0x8, 0x8, 0x4, 0x5, 0x2800000, 0x90, 0x8, 0xfffffffd, 0x7, 0x11, 0x3, 0x8, 0xa24f, 0x7fff, 0x5, 0x2a, 0x8, 0x10001, 0x4, 0xf0ce, 0x75f9453f, 0xcb7, 0x1, 0x1, 0x3, 0x9, 0x2, 0x6, 0xfffffc01, 0x7, 0x5543, 0xfffff000, 0xa7, 0x40, 0x4, 0x80, 0x8, 0x1, 0xffffffff, 0xfff, 0x1, 0x7a, 0x1, 0x39df, 0x2, 0xea4b, 0x7ff, 0xfffffffe, 0x800, 0x5, 0x5, 0xffffd2ad, 0x7209, 0x800, 0x5, 0x3, 0x8, 0xff, 0x1, 0xdf, 0x3ff, 0x2, 0x4, 0x401, 0x1, 0x0, 0x1f, 0x9, 0x67, 0xfffff1a3, 0x4, 0x2, 0x0, 0xb6, 0x0, 0xb81a, 0x5, 0x7fff, 0xfffffffe, 0x5, 0x1, 0x3f, 0x22, 0xd08, 0x2, 0x3f, 0x87, 0xfffffffe, 0x1f, 0x3f, 0x9, 0x80000000, 0x3, 0xa9ec, 0x4, 0x5, 0x5700, 0xc8, 0xffff, 0x7fff, 0xff, 0x2, 0x9, 0x5, 0xfffffffe, 0x3, 0x2a, 0x1ff, 0x9, 0x4, 0x80000000, 0xdbe, 0x5, 0xfff, 0x80000001, 0x1, 0x9, 0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x0, 0x20, 0xfffffffd, 0xfbdfbec7, 0x5, 0x1, 0x70, 0x200000, 0x6, 0x8, 0x9, 0x800, 0x1ff, 0x70d, 0x8001, 0x1, 0x6, 0xffff, 0x0, 0x7, 0x200000, 0x1f, 0x8, 0x0, 0x80000000, 0x4, 0x6, 0x9, 0x9, 0x7, 0xfa28, 0x4a, 0x752, 0x1, 0x3, 0x5, 0x9, 0x585, 0x9, 0x5a62, 0x0, 0x7, 0xffff0001, 0xc1e, 0x40, 0xffffe2bc, 0x2, 0x2, 0xfffff3fc, 0x3, 0x7, 0x7, 0x6a1, 0x7fff, 0x1ff, 0x8, 0xc0, 0x9, 0x5, 0xffffffff, 0x8000, 0x2807a65f, 0x7, 0x7, 0x80000000, 0x7, 0x0, 0x6, 0x3, 0x3, 0x101, 0x2, 0x4, 0x4, 0x1, 0x6, 0x80, 0x6, 0x6, 0xfffffff8, 0x7, 0x5, 0x0, 0x1, 0x7, 0x63, 0x6, 0x3, 0x3, 0x8, 0x1, 0x4e5, 0x1, 0x2, 0x8, 0x2, 0x1000, 0x9, 0xfffffff7, 0x0, 0x7fff, 0x2, 0x13, 0xfffffffc, 0x4f7, 0xffffffff, 0x5, 0xffff, 0x2, 0x8, 0xffff, 0x5, 0xfff, 0x80000001, 0x0, 0x1, 0xffffffff, 0xfffffffa, 0xc7b5, 0x0, 0x2657e444, 0x0, 0xbace, 0x4, 0x5, 0x4, 0xffff, 0x10000, 0x3, 0x3, 0x8, 0xffff, 0x6, 0x7fffffff, 0x100, 0x20, 0x80000001, 0x1f, 0x3ff, 0xfff, 0x6, 0xfffffff8, 0x8001, 0x5, 0x7, 0x0, 0x8, 0xfffffb49, 0x80000001, 0xfffffffa, 0x3, 0xfffffff9, 0x22, 0xfffffc00, 0x9, 0x3, 0x800, 0x7, 0x3, 0x101, 0x9, 0x1000, 0x5, 0xffffffff, 0x1000, 0x243b, 0x3ff, 0x1, 0x9, 0x32ac, 0x2, 0x10001, 0x6, 0x23d1, 0x883, 0x3, 0x4bda, 0x6, 0x8b3, 0x2, 0x9, 0x2, 0x1, 0x5, 0x7f, 0x2, 0x4, 0xd8cb166, 0x8, 0xf0c, 0x1, 0xd1, 0x3, 0x10000, 0x10000, 0x7f, 0x6, 0x7ff, 0x81, 0x3, 0x1, 0x57304397, 0x2, 0x79, 0x7d1f, 0x431eb044, 0x65, 0x1, 0x3, 0x4, 0xbd, 0x0, 0xffff, 0x1ff, 0x9, 0x7bb4, 0x400, 0x8, 0xaa, 0x3, 0x8001, 0x7ff, 0x4c97771c, 0x7, 0x548, 0x800, 0x9, 0x2, 0x5c7, 0xffffff35, 0x3f, 0x7, 0x23, 0x6, 0xfffeffff, 0x0, 0x400, 0x7, 0x5, 0x5f, 0x9, 0x7, 0x3f, 0x2, 0x4, 0x8000, 0x7ff, 0xfffffffa, 0x2, 0x6, 0x4, 0x6, 0x80, 0xffffffff, 0x3f, 0x1, 0x5, 0x200, 0x7000000, 0x4, 0x5, 0x8, 0x1, 0x1, 0x9, 0x49, 0x8, 0x1000, 0xffff8001, 0x80000001, 0x7, 0xfb79, 0x6, 0xffc0000, 0xb6, 0x1, 0x9, 0x8, 0x8, 0x3, 0x81, 0x54, 0x4, 0x7fff, 0x6, 0x2, 0x5, 0x9, 0x8, 0x0, 0x2, 0x1, 0x20, 0x0, 0xfffffffe, 0x40, 0x4, 0x7fff, 0x6, 0x1, 0x6, 0x5, 0x6, 0x20, 0x3f, 0x200, 0x81, 0x400, 0x2, 0x8001, 0x791, 0xffffffff, 0x73e, 0xffffe988, 0x1, 0x1, 0x1f, 0x76d786a1, 0xfffffffe, 0xffff7fff, 0x4, 0x41, 0x8000000, 0x2, 0x4, 0x4e26, 0x0, 0x3ff, 0x6, 0x1, 0x0, 0x8, 0x3ff, 0x2, 0x0, 0x9, 0xd0, 0xffffffff, 0xfffffffa, 0xffffff81, 0x3, 0xffff, 0x3, 0x3, 0xcfe8, 0x1, 0xc6c1, 0xd4, 0x4, 0x7ff, 0x90, 0xfffffffd, 0x0, 0x3, 0x3, 0x0, 0x5, 0x7, 0xc0000000]}) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) 11:55:37 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x5}}, 0x0) 11:55:37 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x80000) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 430.798855] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 430.822474] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 430.871490] audit: type=1804 audit(1579953337.621:514): pid=29955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/168/bus" dev="sda1" ino=17391 res=1 [ 430.918682] erofs: read_super, device -> /dev/nbd0 11:55:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1f) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0x0, 0x0, 0x0, 0xf7, 0x1}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) getresgid(0x0, &(0x7f0000000080), 0x0) getgid() write$selinux_user(0xffffffffffffffff, &(0x7f0000000180)={'system_u:object_r:unconfined_exec_t:s0', 0x20, 'staff_u\x00'}, 0x2f) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r4 = geteuid() sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="5336ff546448000000009bd429c4d231582ec0fb4e2b0bd8597c0cf20f2fb752a2fc97127f222c9117b1240b4fdd97becaeeb7e5f36504baad57f3eb1643ec4e7a76abef786aaa406c268719e7fc28ca9a9abf31d4c1d5aa9ee077930ac4ba726a3f9afc835cbb79c263dddeb05d71ad6d0bb8adda8b94e9a2a26974e94ceb70d239d7e40b95e02222ba80ed12f3a91f28dfbc4e156e77373ee78d9a2c140c4bec93a70ec2caba92b9836d702609016090c4aad2518124f46ddffaf69d321821f7144610e1bb4c2b1eb199"], 0x194}, 0x1, 0x0, 0x0, 0xc0c0}, 0x24040110) syz_open_dev$ndb(0x0, 0x0, 0x40400) [ 430.953431] erofs: options -> (null) [ 430.967628] block nbd0: Attempted send on invalid socket [ 430.973186] print_req_error: I/O error, dev nbd0, sector 0 [ 430.979344] erofs: cannot read erofs superblock 11:55:37 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:37 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x7, 0x3, "ed97467d2c64d29e99655af0b1d21a6c7d7982fbed5df344750e53a3d57c330e", 0x3f, 0x4, 0xff, 0x2, 0x9c17e50274e48b24}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) dup2(r0, r7) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 431.100201] FAULT_INJECTION: forcing a failure. [ 431.100201] name failslab, interval 1, probability 0, space 0, times 0 11:55:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000395000), 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "d2"}, 0x5) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000600)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000004e40)='erofs\x00', 0x0, 0x0) [ 431.192556] CPU: 0 PID: 30382 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 431.200407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.209767] Call Trace: [ 431.212395] dump_stack+0x197/0x210 [ 431.216042] should_fail.cold+0xa/0x1b [ 431.219953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 431.225184] ? lock_downgrade+0x880/0x880 [ 431.229353] __should_failslab+0x121/0x190 [ 431.233608] should_failslab+0x9/0x14 [ 431.237412] kmem_cache_alloc_node+0x26c/0x710 [ 431.242103] __alloc_skb+0xd5/0x5f0 [ 431.245740] ? skb_trim+0x190/0x190 [ 431.249388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.254978] ? netlink_autobind.isra.0+0x228/0x310 [ 431.259915] netlink_sendmsg+0x97b/0xd70 [ 431.263983] ? netlink_unicast+0x730/0x730 [ 431.268399] ? selinux_socket_sendmsg+0x36/0x40 [ 431.273082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.278629] ? security_socket_sendmsg+0x8d/0xc0 [ 431.283393] ? netlink_unicast+0x730/0x730 [ 431.287684] sock_sendmsg+0xd7/0x130 [ 431.291407] ___sys_sendmsg+0x803/0x920 [ 431.295388] ? copy_msghdr_from_user+0x430/0x430 [ 431.300179] ? lock_downgrade+0x880/0x880 [ 431.304336] ? kasan_check_read+0x11/0x20 [ 431.308508] ? __fget+0x367/0x540 [ 431.311966] ? iterate_fd+0x360/0x360 [ 431.315780] ? __fget_light+0x1a9/0x230 [ 431.319755] ? __fdget+0x1b/0x20 [ 431.323123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.328669] __sys_sendmsg+0x105/0x1d0 [ 431.332560] ? __ia32_sys_shutdown+0x80/0x80 [ 431.336988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.341763] ? do_syscall_64+0x26/0x620 [ 431.345744] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.351110] ? do_syscall_64+0x26/0x620 [ 431.355105] __x64_sys_sendmsg+0x78/0xb0 [ 431.359172] do_syscall_64+0xfd/0x620 [ 431.362983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.368171] RIP: 0033:0x45b349 [ 431.371370] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.390379] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.398097] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 431.405368] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 431.412634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.419901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 431.427165] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000000 11:55:38 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:38 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 431.464242] erofs: read_super, device -> /dev/nbd0 [ 431.469806] erofs: options -> (null) [ 431.473976] block nbd0: Attempted send on invalid socket [ 431.479742] print_req_error: I/O error, dev nbd0, sector 0 [ 431.502431] erofs: cannot read erofs superblock 11:55:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) truncate(&(0x7f0000000240)='.\x00', 0x40) socket$inet(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x0, 0x27, 0xbc}, @IFLA_OPERSTATE={0x5}]}, 0xffffffffffffff63}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000200)=0x4) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") 11:55:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000e, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7, 0xd, 0x4, 0x40000, 0x40, {0x77359400}, {0x1, 0x8, 0x3f, 0x81, 0x1, 0x5, "8de7c242"}, 0x9, 0x4, @fd=r1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0 \x00\x00', @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x40012) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x9, 0x600) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800004, 0x13, r4, 0xe000) [ 431.594722] FAULT_INJECTION: forcing a failure. [ 431.594722] name failslab, interval 1, probability 0, space 0, times 0 [ 431.711040] CPU: 0 PID: 30520 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 431.718894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.728261] Call Trace: [ 431.730879] dump_stack+0x197/0x210 [ 431.734543] should_fail.cold+0xa/0x1b [ 431.738467] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 431.743591] ? lock_downgrade+0x880/0x880 [ 431.747761] __should_failslab+0x121/0x190 [ 431.751997] should_failslab+0x9/0x14 [ 431.755792] kmem_cache_alloc_node_trace+0x274/0x720 [ 431.760906] ? __alloc_skb+0xd5/0x5f0 [ 431.764720] __kmalloc_node_track_caller+0x3d/0x80 [ 431.769645] __kmalloc_reserve.isra.0+0x40/0xf0 [ 431.774311] __alloc_skb+0x10b/0x5f0 [ 431.778033] ? skb_trim+0x190/0x190 [ 431.781657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.787189] ? netlink_autobind.isra.0+0x228/0x310 [ 431.792118] netlink_sendmsg+0x97b/0xd70 [ 431.796190] ? netlink_unicast+0x730/0x730 [ 431.800422] ? selinux_socket_sendmsg+0x36/0x40 [ 431.805085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.810627] ? security_socket_sendmsg+0x8d/0xc0 [ 431.815376] ? netlink_unicast+0x730/0x730 [ 431.819604] sock_sendmsg+0xd7/0x130 [ 431.823315] ___sys_sendmsg+0x803/0x920 [ 431.827299] ? copy_msghdr_from_user+0x430/0x430 [ 431.832063] ? lock_downgrade+0x880/0x880 [ 431.836205] ? kasan_check_read+0x11/0x20 [ 431.840349] ? __fget+0x367/0x540 [ 431.843795] ? iterate_fd+0x360/0x360 [ 431.847593] ? __fget_light+0x1a9/0x230 [ 431.851559] ? __fdget+0x1b/0x20 [ 431.854915] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.860473] __sys_sendmsg+0x105/0x1d0 [ 431.864351] ? __ia32_sys_shutdown+0x80/0x80 [ 431.868776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.873543] ? do_syscall_64+0x26/0x620 [ 431.877507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.882861] ? do_syscall_64+0x26/0x620 [ 431.886831] __x64_sys_sendmsg+0x78/0xb0 [ 431.890886] do_syscall_64+0xfd/0x620 [ 431.894679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.899854] RIP: 0033:0x45b349 [ 431.903037] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.921935] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.929642] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 431.936910] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 431.944205] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.951468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 431.958729] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000001 11:55:38 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:38 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:38 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:38 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf200000700"/19], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000d2800"/98], 0x74}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400"/20, @ANYRES32=r11, @ANYBLOB="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"], 0x84}}, 0x0) sendmsg$sock(r6, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x10, r11, 0x1, 0x8, 0x6, @random="7870053f6049"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="0c34bd24ecb6bd5bf77798e71f1f7935495bfb1ac566bbd526b1598ca9a5f5022b7346d4dc94587ed0e4b44d49df62c5a651983db23be19230b47f5f661200749e5a082bf34068a32db043b942734c2ff09e42b76821ebf7caa1bb072d6ff424de5735dfc0acb7c212fd56e5ed233e7d0da3c0ed6793c43a01c20d31d7718e4766cbf2d91d5c30aa2f1d2843aadca3763215a987749a26", 0x97}], 0x1, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5c89}}, @timestamping={{0x14, 0x1, 0x25, 0x200000}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x4004800) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:39 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x8040) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x391081, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x2b2, 0x80040) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0117007c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r9}, 0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r12}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000440)={r9, 0x10, 0x5e0, 0x20, 0x2, 0x8, 0x42, 0x518, {r12, @in6={{0xa, 0x4e21, 0xf0bc, @remote, 0x7f}}, 0x4, 0x3, 0x413, 0x1ff, 0x7d}}, &(0x7f0000000300)=0xb0) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000300)) readv(r13, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) poll(&(0x7f00000002c0)=[{r1, 0x3144}, {r13, 0x1}, {r2, 0x8262}, {r3, 0x100}, {r4, 0x4080}, {r5, 0xc9}, {r6, 0x6071}], 0x7, 0x0) r14 = eventfd2(0x0, 0x0) read(r14, &(0x7f0000000340)=""/232, 0xe8) [ 432.266245] FAULT_INJECTION: forcing a failure. [ 432.266245] name failslab, interval 1, probability 0, space 0, times 0 [ 432.289459] CPU: 1 PID: 30670 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 432.297314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.306673] Call Trace: [ 432.309279] dump_stack+0x197/0x210 [ 432.312931] should_fail.cold+0xa/0x1b [ 432.316843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 432.321966] ? netlink_deliver_tap+0x146/0xc20 [ 432.326577] __should_failslab+0x121/0x190 [ 432.330832] should_failslab+0x9/0x14 [ 432.334674] kmem_cache_alloc+0x47/0x700 [ 432.338774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.344420] ? check_preemption_disabled+0x48/0x290 [ 432.349447] ? lock_acquire+0x16f/0x3f0 [ 432.353436] skb_clone+0x156/0x3e0 [ 432.355776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30669 comm=syz-executor.4 [ 432.356990] netlink_deliver_tap+0x97b/0xc20 [ 432.357014] netlink_unicast+0x5ae/0x730 [ 432.377541] ? netlink_attachskb+0x770/0x770 [ 432.381972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.387526] netlink_sendmsg+0x8ae/0xd70 [ 432.391606] ? netlink_unicast+0x730/0x730 [ 432.395868] ? selinux_socket_sendmsg+0x36/0x40 [ 432.400540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.406068] ? security_socket_sendmsg+0x8d/0xc0 [ 432.410826] ? netlink_unicast+0x730/0x730 [ 432.415081] sock_sendmsg+0xd7/0x130 [ 432.418811] ___sys_sendmsg+0x803/0x920 [ 432.422833] ? copy_msghdr_from_user+0x430/0x430 [ 432.427625] ? lock_downgrade+0x880/0x880 [ 432.431786] ? kasan_check_read+0x11/0x20 [ 432.435947] ? __fget+0x367/0x540 [ 432.439530] ? iterate_fd+0x360/0x360 [ 432.443353] ? __fget_light+0x1a9/0x230 [ 432.447343] ? __fdget+0x1b/0x20 [ 432.450725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.456334] __sys_sendmsg+0x105/0x1d0 [ 432.460251] ? __ia32_sys_shutdown+0x80/0x80 [ 432.464686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.469455] ? do_syscall_64+0x26/0x620 [ 432.473444] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.479341] ? do_syscall_64+0x26/0x620 [ 432.483333] __x64_sys_sendmsg+0x78/0xb0 [ 432.487414] do_syscall_64+0xfd/0x620 [ 432.491263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.496576] RIP: 0033:0x45b349 11:55:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000540)={'syz_tun\x00', 0x3, 0x7}) open(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11}]}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000280)={@any, 0x7, 0xf63, 0x6, 0x1, 0x400, "82bf4f4c6b888508f6f4e136ec02c871ee2380bfe3d45d4971f30bb7417a31185ab72ff574979030d339d477505a40e70517a3007be789e87011e651502fa2dd4e04b4fc4e5fbc57cd6b3d30cb2e18be46e310d2fe87aea4e226e4427b5203a3e47184240440610148ba6bf3e179c59872c5af4077e031fc61d5a4ef959d5c5a"}) [ 432.499784] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.518695] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.526413] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 432.533693] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 432.540966] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 432.548246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 432.555527] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000002 11:55:39 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:39 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000000)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) readv(r10, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) dup2(r1, r5) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 432.823036] FAULT_INJECTION: forcing a failure. [ 432.823036] name failslab, interval 1, probability 0, space 0, times 0 [ 432.845780] CPU: 0 PID: 30742 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 432.853833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.863200] Call Trace: [ 432.865860] dump_stack+0x197/0x210 [ 432.869517] should_fail.cold+0xa/0x1b [ 432.873435] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 432.878550] ? lock_downgrade+0x880/0x880 [ 432.882715] __should_failslab+0x121/0x190 [ 432.886960] should_failslab+0x9/0x14 [ 432.890767] kmem_cache_alloc_node_trace+0x274/0x720 [ 432.895888] __kmalloc_node+0x3d/0x80 [ 432.899709] kvmalloc_node+0x68/0x100 [ 432.903560] alloc_netdev_mqs+0x98/0xdb0 [ 432.907742] ? ppp_get_stats64+0x3b0/0x3b0 [ 432.912024] rtnl_create_link+0x1dd/0xa00 [ 432.916180] ? netlink_ns_capable+0x26/0x30 [ 432.920514] rtnl_newlink+0xf3f/0x1600 [ 432.924409] ? rtnl_link_unregister+0x250/0x250 [ 432.929082] ? mark_held_locks+0x100/0x100 [ 432.933345] ? __lock_acquire+0x6ee/0x49c0 [ 432.937584] ? cpuacct_charge+0x1db/0x360 [ 432.941736] ? __lock_is_held+0xb6/0x140 [ 432.945800] ? mark_held_locks+0xb1/0x100 [ 432.949971] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.954753] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.959542] ? retint_kernel+0x2d/0x2d [ 432.963425] ? trace_hardirqs_on_caller+0x6a/0x220 [ 432.968373] ? __lock_acquire+0x6ee/0x49c0 [ 432.972631] ? retint_kernel+0x2d/0x2d [ 432.976529] ? mark_held_locks+0x100/0x100 [ 432.980761] ? _raw_spin_unlock_irq+0x54/0x90 [ 432.985256] ? _raw_spin_unlock_irq+0x5e/0x90 [ 432.989751] ? finish_task_switch+0x146/0x7c0 [ 432.994243] ? finish_task_switch+0x118/0x7c0 [ 432.998730] ? switch_mm_irqs_off+0x7fa/0x1360 [ 433.003332] ? __mutex_lock+0xa67/0x1300 [ 433.007398] ? find_held_lock+0x35/0x130 [ 433.011512] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.017060] ? rtnl_link_unregister+0x250/0x250 [ 433.021736] rtnetlink_rcv_msg+0x463/0xb00 [ 433.025988] ? rtnetlink_put_metrics+0x560/0x560 [ 433.030759] ? netdev_pick_tx+0x300/0x300 [ 433.034910] ? netlink_deliver_tap+0x22d/0xc20 [ 433.039500] ? find_held_lock+0x35/0x130 [ 433.043569] netlink_rcv_skb+0x17d/0x460 [ 433.047639] ? rtnetlink_put_metrics+0x560/0x560 [ 433.052401] ? netlink_ack+0xb30/0xb30 [ 433.056291] ? kasan_check_read+0x11/0x20 [ 433.060449] ? netlink_deliver_tap+0x254/0xc20 [ 433.065033] rtnetlink_rcv+0x1d/0x30 [ 433.068753] netlink_unicast+0x53a/0x730 [ 433.072828] ? netlink_attachskb+0x770/0x770 [ 433.077263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.082812] netlink_sendmsg+0x8ae/0xd70 [ 433.086887] ? netlink_unicast+0x730/0x730 [ 433.091132] ? selinux_socket_sendmsg+0x36/0x40 [ 433.095808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.101352] ? security_socket_sendmsg+0x8d/0xc0 [ 433.106114] ? netlink_unicast+0x730/0x730 [ 433.110454] sock_sendmsg+0xd7/0x130 [ 433.114174] ___sys_sendmsg+0x803/0x920 [ 433.118159] ? copy_msghdr_from_user+0x430/0x430 [ 433.122916] ? lock_downgrade+0x880/0x880 [ 433.127071] ? kasan_check_read+0x11/0x20 [ 433.131221] ? __fget+0x367/0x540 [ 433.134684] ? iterate_fd+0x360/0x360 [ 433.138489] ? __fget_light+0x1a9/0x230 [ 433.142468] ? __fdget+0x1b/0x20 [ 433.145830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.151389] __sys_sendmsg+0x105/0x1d0 [ 433.155284] ? __ia32_sys_shutdown+0x80/0x80 [ 433.159707] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.164464] ? do_syscall_64+0x26/0x620 [ 433.168440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.173802] ? do_syscall_64+0x26/0x620 [ 433.177782] __x64_sys_sendmsg+0x78/0xb0 [ 433.181852] do_syscall_64+0xfd/0x620 [ 433.185659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.190849] RIP: 0033:0x45b349 [ 433.194038] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.212939] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 11:55:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 433.220649] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 433.227919] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 433.235190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.242455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 433.249727] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000003 11:55:40 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:40 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:40 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') syz_open_procfs(0x0, 0x0) gettid() socket$inet6(0xa, 0xc, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x549900, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_open_pts(r3, 0x10a01) 11:55:40 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) dup2(r0, r6) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400400) write$FUSE_OPEN(r7, &(0x7f0000000040)={0x20, 0x0, 0x2}, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 433.721130] FAULT_INJECTION: forcing a failure. [ 433.721130] name failslab, interval 1, probability 0, space 0, times 0 11:55:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:40 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000180)=[0x10000, 0x2]) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 433.848504] CPU: 1 PID: 30811 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 433.856355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.865718] Call Trace: [ 433.868427] dump_stack+0x197/0x210 [ 433.872081] should_fail.cold+0xa/0x1b [ 433.875988] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 433.881098] ? find_held_lock+0x35/0x130 [ 433.885183] __should_failslab+0x121/0x190 [ 433.887500] audit: type=1804 audit(1579953340.761:515): pid=30820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/31/bus" dev="sda1" ino=17368 res=1 [ 433.889429] should_failslab+0x9/0x14 [ 433.889446] kmem_cache_alloc_trace+0x4b/0x760 [ 433.889469] __hw_addr_create_ex+0x5e/0x310 [ 433.928900] __hw_addr_add_ex+0x1ef/0x2b0 [ 433.933069] dev_addr_init+0x118/0x200 [ 433.936974] ? dev_mc_flush+0x40/0x40 [ 433.940796] ? __kmalloc_node+0x51/0x80 [ 433.944798] alloc_netdev_mqs+0x142/0xdb0 [ 433.948964] ? ppp_get_stats64+0x3b0/0x3b0 [ 433.953226] rtnl_create_link+0x1dd/0xa00 [ 433.957388] ? netlink_ns_capable+0x26/0x30 [ 433.961732] rtnl_newlink+0xf3f/0x1600 [ 433.965655] ? rtnl_link_unregister+0x250/0x250 [ 433.970338] ? mark_held_locks+0x100/0x100 [ 433.974601] ? is_bpf_text_address+0xac/0x170 [ 433.979124] ? find_held_lock+0x35/0x130 [ 433.983207] ? __lock_acquire+0x6ee/0x49c0 [ 433.987458] ? __lock_acquire+0x6ee/0x49c0 [ 433.991742] ? lock_downgrade+0x880/0x880 [ 433.995922] ? mark_held_locks+0x100/0x100 [ 434.000202] ? mark_held_locks+0x100/0x100 [ 434.004443] ? __kernel_text_address+0xd/0x40 [ 434.008955] ? avc_has_perm_noaudit+0x38f/0x570 [ 434.013638] ? find_held_lock+0x35/0x130 [ 434.017735] ? __lock_acquire+0x6ee/0x49c0 [ 434.021987] ? lock_downgrade+0x880/0x880 [ 434.026156] ? mark_held_locks+0x100/0x100 [ 434.030404] ? avc_has_perm_noaudit+0x3b6/0x570 [ 434.035234] ? avc_has_extended_perms+0x10f0/0x10f0 [ 434.040271] ? avc_has_extended_perms+0x10f0/0x10f0 [ 434.045339] ? find_held_lock+0x35/0x130 [ 434.049421] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 434.053858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.059415] ? rtnl_link_unregister+0x250/0x250 [ 434.064097] rtnetlink_rcv_msg+0x463/0xb00 [ 434.068352] ? rtnetlink_put_metrics+0x560/0x560 [ 434.073122] ? netdev_pick_tx+0x300/0x300 [ 434.077295] ? netlink_deliver_tap+0x22d/0xc20 [ 434.081895] ? find_held_lock+0x35/0x130 [ 434.085973] netlink_rcv_skb+0x17d/0x460 [ 434.090048] ? rtnetlink_put_metrics+0x560/0x560 [ 434.094831] ? netlink_ack+0xb30/0xb30 [ 434.098776] ? kasan_check_read+0x11/0x20 [ 434.106674] ? netlink_deliver_tap+0x254/0xc20 [ 434.111283] rtnetlink_rcv+0x1d/0x30 [ 434.115007] netlink_unicast+0x53a/0x730 [ 434.119098] ? netlink_attachskb+0x770/0x770 [ 434.123526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.129074] netlink_sendmsg+0x8ae/0xd70 [ 434.133155] ? netlink_unicast+0x730/0x730 [ 434.137412] ? selinux_socket_sendmsg+0x36/0x40 [ 434.142089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.147661] ? security_socket_sendmsg+0x8d/0xc0 [ 434.152433] ? netlink_unicast+0x730/0x730 [ 434.156687] sock_sendmsg+0xd7/0x130 [ 434.160412] ___sys_sendmsg+0x803/0x920 [ 434.164407] ? copy_msghdr_from_user+0x430/0x430 [ 434.169183] ? lock_downgrade+0x880/0x880 [ 434.173348] ? kasan_check_read+0x11/0x20 [ 434.177514] ? __fget+0x367/0x540 [ 434.181006] ? iterate_fd+0x360/0x360 [ 434.184826] ? __fget_light+0x1a9/0x230 [ 434.188810] ? __fdget+0x1b/0x20 [ 434.192189] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.197751] __sys_sendmsg+0x105/0x1d0 [ 434.201662] ? __ia32_sys_shutdown+0x80/0x80 [ 434.206089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 434.210851] ? do_syscall_64+0x26/0x620 [ 434.214838] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.220209] ? do_syscall_64+0x26/0x620 [ 434.224194] __x64_sys_sendmsg+0x78/0xb0 [ 434.228276] do_syscall_64+0xfd/0x620 [ 434.232089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.237284] RIP: 0033:0x45b349 [ 434.240484] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.259398] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.267128] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 434.274398] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 434.281668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 434.288948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 434.296224] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000004 11:55:41 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:41 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 434.574553] audit: type=1804 audit(1579953341.441:516): pid=30832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/31/bus" dev="sda1" ino=17368 res=1 [ 434.615587] audit: type=1800 audit(1579953341.451:517): pid=30839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17368 res=0 [ 434.649293] FAULT_INJECTION: forcing a failure. [ 434.649293] name failslab, interval 1, probability 0, space 0, times 0 [ 434.674367] CPU: 1 PID: 30858 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 434.682221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.691595] Call Trace: [ 434.694208] dump_stack+0x197/0x210 [ 434.697868] should_fail.cold+0xa/0x1b [ 434.701786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 434.706907] ? find_held_lock+0x35/0x130 [ 434.710989] __should_failslab+0x121/0x190 [ 434.715252] should_failslab+0x9/0x14 [ 434.719068] kmem_cache_alloc_trace+0x4b/0x760 11:55:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') syz_open_procfs(0x0, 0x0) gettid() socket$inet6(0xa, 0xc, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x549900, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_open_pts(r3, 0x10a01) 11:55:41 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 434.723677] __hw_addr_create_ex+0x5e/0x310 [ 434.728021] __hw_addr_add_ex+0x1ef/0x2b0 [ 434.732206] dev_addr_init+0x118/0x200 [ 434.736112] ? dev_mc_flush+0x40/0x40 [ 434.740030] ? __kmalloc_node+0x51/0x80 [ 434.744028] alloc_netdev_mqs+0x142/0xdb0 [ 434.748191] ? ppp_get_stats64+0x3b0/0x3b0 [ 434.752447] rtnl_create_link+0x1dd/0xa00 [ 434.756607] ? netlink_ns_capable+0x26/0x30 [ 434.760952] rtnl_newlink+0xf3f/0x1600 [ 434.764861] ? rtnl_link_unregister+0x250/0x250 [ 434.769539] ? mark_held_locks+0x100/0x100 [ 434.773942] ? is_bpf_text_address+0xac/0x170 [ 434.778450] ? find_held_lock+0x35/0x130 [ 434.782527] ? __lock_acquire+0x6ee/0x49c0 [ 434.786785] ? __lock_acquire+0x6ee/0x49c0 [ 434.791034] ? lock_downgrade+0x880/0x880 [ 434.795203] ? mark_held_locks+0x100/0x100 [ 434.799572] ? mark_held_locks+0x100/0x100 [ 434.803822] ? __kernel_text_address+0xd/0x40 [ 434.808434] ? avc_has_perm_noaudit+0x38f/0x570 [ 434.813123] ? find_held_lock+0x35/0x130 [ 434.817205] ? __lock_acquire+0x6ee/0x49c0 [ 434.821461] ? lock_downgrade+0x880/0x880 [ 434.825636] ? mark_held_locks+0x100/0x100 [ 434.829893] ? avc_has_perm_noaudit+0x3b6/0x570 [ 434.834592] ? avc_has_extended_perms+0x10f0/0x10f0 [ 434.839724] ? avc_has_extended_perms+0x10f0/0x10f0 [ 434.844803] ? find_held_lock+0x35/0x130 [ 434.848883] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 434.853313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.858865] ? rtnl_link_unregister+0x250/0x250 [ 434.863549] rtnetlink_rcv_msg+0x463/0xb00 [ 434.867801] ? rtnetlink_put_metrics+0x560/0x560 11:55:41 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 434.872571] ? netdev_pick_tx+0x300/0x300 [ 434.876733] ? netlink_deliver_tap+0x22d/0xc20 [ 434.881339] ? find_held_lock+0x35/0x130 [ 434.885421] netlink_rcv_skb+0x17d/0x460 [ 434.889491] ? rtnetlink_put_metrics+0x560/0x560 [ 434.894264] ? netlink_ack+0xb30/0xb30 [ 434.898166] ? kasan_check_read+0x11/0x20 [ 434.902333] ? netlink_deliver_tap+0x254/0xc20 [ 434.906975] rtnetlink_rcv+0x1d/0x30 [ 434.910698] netlink_unicast+0x53a/0x730 [ 434.914788] ? netlink_attachskb+0x770/0x770 [ 434.919224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 11:55:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 434.924793] netlink_sendmsg+0x8ae/0xd70 [ 434.928887] ? netlink_unicast+0x730/0x730 [ 434.933150] ? selinux_socket_sendmsg+0x36/0x40 [ 434.937939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.943498] ? security_socket_sendmsg+0x8d/0xc0 [ 434.948271] ? netlink_unicast+0x730/0x730 [ 434.952524] sock_sendmsg+0xd7/0x130 [ 434.956259] ___sys_sendmsg+0x803/0x920 [ 434.960256] ? copy_msghdr_from_user+0x430/0x430 [ 434.965037] ? lock_downgrade+0x880/0x880 [ 434.969214] ? kasan_check_read+0x11/0x20 [ 434.973381] ? __fget+0x367/0x540 [ 434.976856] ? iterate_fd+0x360/0x360 [ 434.980679] ? __fget_light+0x1a9/0x230 [ 434.984674] ? __fdget+0x1b/0x20 [ 434.988057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.993614] __sys_sendmsg+0x105/0x1d0 [ 434.997518] ? __ia32_sys_shutdown+0x80/0x80 [ 435.001955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.006722] ? do_syscall_64+0x26/0x620 [ 435.010719] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.016099] ? do_syscall_64+0x26/0x620 [ 435.020098] __x64_sys_sendmsg+0x78/0xb0 [ 435.024179] do_syscall_64+0xfd/0x620 [ 435.028009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.033216] RIP: 0033:0x45b349 [ 435.036424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.055340] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.063078] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 435.070368] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 435.077653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 435.084935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 435.092218] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000005 [ 435.100633] audit: type=1804 audit(1579953341.821:518): pid=30881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/32/bus" dev="sda1" ino=17399 res=1 11:55:42 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:42 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0), 0x4) tkill(r2, 0x1000000000015) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6900) write$P9_RMKDIR(r6, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x2, 0x3, 0x4}}, 0x14) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8400fffffffa) sendfile(r8, r9, 0x0, 0xffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r9, 0x40045402, &(0x7f0000000040)=0x1) 11:55:42 executing program 5 (fault-call:4 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 435.370654] FAULT_INJECTION: forcing a failure. [ 435.370654] name failslab, interval 1, probability 0, space 0, times 0 [ 435.449596] CPU: 1 PID: 30974 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 435.457441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.466806] Call Trace: [ 435.469419] dump_stack+0x197/0x210 [ 435.473081] should_fail.cold+0xa/0x1b [ 435.476995] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 435.482134] ? lock_downgrade+0x880/0x880 [ 435.486316] __should_failslab+0x121/0x190 [ 435.490567] should_failslab+0x9/0x14 [ 435.494386] kmem_cache_alloc_node_trace+0x274/0x720 [ 435.499508] ? retint_kernel+0x2d/0x2d [ 435.503426] __kmalloc_node+0x3d/0x80 [ 435.507243] kvmalloc_node+0x68/0x100 [ 435.511058] alloc_netdev_mqs+0x6e4/0xdb0 [ 435.515217] ? ppp_get_stats64+0x3b0/0x3b0 [ 435.519469] rtnl_create_link+0x1dd/0xa00 [ 435.523630] ? netlink_ns_capable+0x26/0x30 [ 435.527971] rtnl_newlink+0xf3f/0x1600 [ 435.531886] ? rtnl_link_unregister+0x250/0x250 [ 435.536568] ? mark_held_locks+0x100/0x100 [ 435.540832] ? is_bpf_text_address+0xac/0x170 [ 435.545351] ? find_held_lock+0x35/0x130 [ 435.549433] ? __lock_acquire+0x6ee/0x49c0 [ 435.553684] ? __lock_acquire+0x6ee/0x49c0 [ 435.557935] ? lock_downgrade+0x880/0x880 [ 435.562111] ? mark_held_locks+0x100/0x100 [ 435.566364] ? mark_held_locks+0x100/0x100 [ 435.570614] ? __kernel_text_address+0xd/0x40 [ 435.575135] ? avc_has_perm_noaudit+0x38f/0x570 [ 435.579823] ? find_held_lock+0x35/0x130 [ 435.583901] ? __lock_acquire+0x6ee/0x49c0 [ 435.588159] ? lock_downgrade+0x880/0x880 [ 435.592332] ? mark_held_locks+0x100/0x100 [ 435.596581] ? avc_has_perm_noaudit+0x3b6/0x570 [ 435.601272] ? avc_has_extended_perms+0x10f0/0x10f0 [ 435.606429] ? avc_has_extended_perms+0x10f0/0x10f0 [ 435.611502] ? find_held_lock+0x35/0x130 [ 435.615582] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 435.620553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.626114] ? rtnl_link_unregister+0x250/0x250 [ 435.630801] rtnetlink_rcv_msg+0x463/0xb00 [ 435.635053] ? rtnetlink_put_metrics+0x560/0x560 [ 435.639829] ? netdev_pick_tx+0x300/0x300 [ 435.643989] ? netlink_deliver_tap+0x22d/0xc20 [ 435.648613] ? find_held_lock+0x35/0x130 [ 435.652691] netlink_rcv_skb+0x17d/0x460 [ 435.656775] ? rtnetlink_put_metrics+0x560/0x560 [ 435.661646] ? netlink_ack+0xb30/0xb30 [ 435.665620] ? kasan_check_read+0x11/0x20 [ 435.669793] ? netlink_deliver_tap+0x254/0xc20 [ 435.674401] rtnetlink_rcv+0x1d/0x30 [ 435.678134] netlink_unicast+0x53a/0x730 [ 435.682280] ? netlink_attachskb+0x770/0x770 [ 435.686718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.692288] netlink_sendmsg+0x8ae/0xd70 [ 435.696376] ? netlink_unicast+0x730/0x730 [ 435.700732] ? selinux_socket_sendmsg+0x36/0x40 [ 435.705522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.711072] ? security_socket_sendmsg+0x8d/0xc0 [ 435.715842] ? netlink_unicast+0x730/0x730 [ 435.720093] sock_sendmsg+0xd7/0x130 [ 435.723815] ___sys_sendmsg+0x803/0x920 [ 435.727814] ? copy_msghdr_from_user+0x430/0x430 [ 435.732583] ? lock_downgrade+0x880/0x880 [ 435.736851] ? kasan_check_read+0x11/0x20 [ 435.741025] ? __fget+0x367/0x540 [ 435.744508] ? iterate_fd+0x360/0x360 [ 435.748332] ? __fget_light+0x1a9/0x230 [ 435.752317] ? __fdget+0x1b/0x20 [ 435.755697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.761256] __sys_sendmsg+0x105/0x1d0 [ 435.765161] ? __ia32_sys_shutdown+0x80/0x80 [ 435.769602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.774379] ? do_syscall_64+0x26/0x620 [ 435.778372] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.783751] ? do_syscall_64+0x26/0x620 [ 435.787751] __x64_sys_sendmsg+0x78/0xb0 [ 435.791833] do_syscall_64+0xfd/0x620 [ 435.795662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.800864] RIP: 0033:0x45b349 [ 435.804073] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.823001] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.830733] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 435.838019] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 11:55:42 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 435.845302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 435.852584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 435.859863] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000006 11:55:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:42 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:42 executing program 5 (fault-call:4 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:42 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:43 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 436.291675] FAULT_INJECTION: forcing a failure. [ 436.291675] name failslab, interval 1, probability 0, space 0, times 0 [ 436.307663] CPU: 0 PID: 30994 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 436.315499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.324863] Call Trace: [ 436.327473] dump_stack+0x197/0x210 [ 436.331132] should_fail.cold+0xa/0x1b [ 436.335054] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 436.340176] ? lock_downgrade+0x880/0x880 [ 436.344350] __should_failslab+0x121/0x190 [ 436.348601] should_failslab+0x9/0x14 [ 436.352439] kmem_cache_alloc_node+0x26c/0x710 [ 436.357035] ? netdev_run_todo+0x559/0x7a0 [ 436.361286] __alloc_skb+0xd5/0x5f0 [ 436.364934] ? skb_trim+0x190/0x190 [ 436.368584] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.374147] ? rtnl_link_unregister+0x250/0x250 [ 436.378841] netlink_ack+0x25c/0xb30 [ 436.382570] ? netlink_sendmsg+0xd70/0xd70 [ 436.386850] ? netlink_deliver_tap+0x22d/0xc20 [ 436.391450] ? find_held_lock+0x35/0x130 [ 436.395533] netlink_rcv_skb+0x382/0x460 [ 436.399612] ? rtnetlink_put_metrics+0x560/0x560 [ 436.404382] ? netlink_ack+0xb30/0xb30 [ 436.408286] ? kasan_check_read+0x11/0x20 [ 436.412456] ? netlink_deliver_tap+0x254/0xc20 [ 436.417056] rtnetlink_rcv+0x1d/0x30 [ 436.420785] netlink_unicast+0x53a/0x730 [ 436.424875] ? netlink_attachskb+0x770/0x770 [ 436.429301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.434861] netlink_sendmsg+0x8ae/0xd70 [ 436.438946] ? netlink_unicast+0x730/0x730 [ 436.443204] ? selinux_socket_sendmsg+0x36/0x40 [ 436.447892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.453452] ? security_socket_sendmsg+0x8d/0xc0 [ 436.458227] ? netlink_unicast+0x730/0x730 [ 436.462484] sock_sendmsg+0xd7/0x130 [ 436.466219] ___sys_sendmsg+0x803/0x920 [ 436.470223] ? copy_msghdr_from_user+0x430/0x430 [ 436.475032] ? lock_downgrade+0x880/0x880 [ 436.479201] ? kasan_check_read+0x11/0x20 [ 436.483371] ? __fget+0x367/0x540 [ 436.486852] ? iterate_fd+0x360/0x360 11:55:43 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:43 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 436.490675] ? __fget_light+0x1a9/0x230 [ 436.494666] ? __fdget+0x1b/0x20 [ 436.498050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.503605] __sys_sendmsg+0x105/0x1d0 [ 436.507507] ? __ia32_sys_shutdown+0x80/0x80 [ 436.511946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 436.516719] ? do_syscall_64+0x26/0x620 [ 436.520743] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.526129] ? do_syscall_64+0x26/0x620 [ 436.530126] __x64_sys_sendmsg+0x78/0xb0 [ 436.534197] do_syscall_64+0xfd/0x620 [ 436.538016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.543210] RIP: 0033:0x45b349 [ 436.546413] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.565337] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.573064] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 436.580337] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 436.587640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.594921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 436.602182] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000007 11:55:45 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000000)=0x5813, 0x4) 11:55:45 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:45 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:45 executing program 5 (fault-call:4 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 438.328971] FAULT_INJECTION: forcing a failure. [ 438.328971] name failslab, interval 1, probability 0, space 0, times 0 [ 438.382432] CPU: 0 PID: 31125 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 438.390286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.399653] Call Trace: [ 438.402266] dump_stack+0x197/0x210 [ 438.405920] should_fail.cold+0xa/0x1b [ 438.409830] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 438.414952] ? lock_downgrade+0x880/0x880 [ 438.419127] __should_failslab+0x121/0x190 [ 438.423383] should_failslab+0x9/0x14 [ 438.427202] kmem_cache_alloc_node_trace+0x274/0x720 [ 438.432328] ? __alloc_skb+0xd5/0x5f0 [ 438.436156] __kmalloc_node_track_caller+0x3d/0x80 [ 438.441115] __kmalloc_reserve.isra.0+0x40/0xf0 [ 438.445811] __alloc_skb+0x10b/0x5f0 [ 438.449551] ? skb_trim+0x190/0x190 [ 438.453300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.458853] ? rtnl_link_unregister+0x250/0x250 [ 438.463640] netlink_ack+0x25c/0xb30 [ 438.467372] ? netlink_sendmsg+0xd70/0xd70 [ 438.471699] ? netlink_deliver_tap+0x22d/0xc20 [ 438.476393] ? find_held_lock+0x35/0x130 [ 438.480477] netlink_rcv_skb+0x382/0x460 [ 438.484555] ? rtnetlink_put_metrics+0x560/0x560 [ 438.489324] ? netlink_ack+0xb30/0xb30 [ 438.493293] ? kasan_check_read+0x11/0x20 [ 438.497488] ? netlink_deliver_tap+0x254/0xc20 [ 438.502095] rtnetlink_rcv+0x1d/0x30 [ 438.505830] netlink_unicast+0x53a/0x730 [ 438.509905] ? netlink_attachskb+0x770/0x770 [ 438.514336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.519896] netlink_sendmsg+0x8ae/0xd70 [ 438.523982] ? netlink_unicast+0x730/0x730 [ 438.528230] ? selinux_socket_sendmsg+0x36/0x40 [ 438.532906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.538452] ? security_socket_sendmsg+0x8d/0xc0 [ 438.543234] ? netlink_unicast+0x730/0x730 [ 438.547485] sock_sendmsg+0xd7/0x130 [ 438.551221] ___sys_sendmsg+0x803/0x920 [ 438.555208] ? copy_msghdr_from_user+0x430/0x430 [ 438.559991] ? lock_downgrade+0x880/0x880 [ 438.564163] ? kasan_check_read+0x11/0x20 [ 438.568335] ? __fget+0x367/0x540 [ 438.571831] ? iterate_fd+0x360/0x360 [ 438.575657] ? __fget_light+0x1a9/0x230 [ 438.579650] ? __fdget+0x1b/0x20 [ 438.583024] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.588577] __sys_sendmsg+0x105/0x1d0 [ 438.592481] ? __ia32_sys_shutdown+0x80/0x80 [ 438.596924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.601698] ? do_syscall_64+0x26/0x620 [ 438.605689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.611062] ? do_syscall_64+0x26/0x620 [ 438.615058] __x64_sys_sendmsg+0x78/0xb0 [ 438.619139] do_syscall_64+0xfd/0x620 [ 438.622960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.628161] RIP: 0033:0x45b349 [ 438.631465] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.650379] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.658101] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 438.665379] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 438.672654] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:55:45 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 438.680032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 438.687315] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000008 11:55:45 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:45 executing program 5 (fault-call:4 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:45 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:45 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:45 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 439.099432] FAULT_INJECTION: forcing a failure. [ 439.099432] name failslab, interval 1, probability 0, space 0, times 0 [ 439.155556] CPU: 1 PID: 31243 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 439.163410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.172777] Call Trace: [ 439.175378] dump_stack+0x197/0x210 [ 439.179030] should_fail.cold+0xa/0x1b [ 439.182948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 439.188073] ? find_held_lock+0x35/0x130 [ 439.192157] ? netlink_deliver_tap+0x146/0xc20 [ 439.196773] __should_failslab+0x121/0x190 [ 439.201027] should_failslab+0x9/0x14 [ 439.204935] kmem_cache_alloc+0x47/0x700 [ 439.209016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.214575] ? check_preemption_disabled+0x48/0x290 [ 439.219611] ? lock_acquire+0x16f/0x3f0 [ 439.223604] skb_clone+0x156/0x3e0 [ 439.227166] netlink_deliver_tap+0x97b/0xc20 [ 439.231710] __netlink_sendskb+0x68/0xc0 [ 439.235791] netlink_unicast+0x61c/0x730 [ 439.239873] ? netlink_attachskb+0x770/0x770 [ 439.244319] netlink_ack+0x645/0xb30 [ 439.248055] ? netlink_sendmsg+0xd70/0xd70 [ 439.252302] ? netlink_deliver_tap+0x22d/0xc20 [ 439.256902] ? find_held_lock+0x35/0x130 [ 439.260988] netlink_rcv_skb+0x382/0x460 [ 439.265064] ? rtnetlink_put_metrics+0x560/0x560 [ 439.269839] ? netlink_ack+0xb30/0xb30 [ 439.273766] ? kasan_check_read+0x11/0x20 [ 439.277934] ? netlink_deliver_tap+0x254/0xc20 [ 439.282545] rtnetlink_rcv+0x1d/0x30 [ 439.286269] netlink_unicast+0x53a/0x730 [ 439.290354] ? netlink_attachskb+0x770/0x770 [ 439.294781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.300333] netlink_sendmsg+0x8ae/0xd70 [ 439.304413] ? netlink_unicast+0x730/0x730 [ 439.308659] ? selinux_socket_sendmsg+0x36/0x40 [ 439.313335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.318879] ? security_socket_sendmsg+0x8d/0xc0 [ 439.323640] ? netlink_unicast+0x730/0x730 [ 439.327882] sock_sendmsg+0xd7/0x130 [ 439.331620] ___sys_sendmsg+0x803/0x920 [ 439.335622] ? copy_msghdr_from_user+0x430/0x430 [ 439.340404] ? lock_downgrade+0x880/0x880 [ 439.344587] ? kasan_check_read+0x11/0x20 [ 439.348745] ? __fget+0x367/0x540 [ 439.352208] ? iterate_fd+0x360/0x360 [ 439.356021] ? __fget_light+0x1a9/0x230 [ 439.360006] ? __fdget+0x1b/0x20 [ 439.363386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.368937] __sys_sendmsg+0x105/0x1d0 [ 439.372831] ? __ia32_sys_shutdown+0x80/0x80 [ 439.377257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.382015] ? do_syscall_64+0x26/0x620 [ 439.385997] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.391366] ? do_syscall_64+0x26/0x620 [ 439.395347] __x64_sys_sendmsg+0x78/0xb0 [ 439.399416] do_syscall_64+0xfd/0x620 [ 439.403240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.408429] RIP: 0033:0x45b349 [ 439.411629] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.430544] RSP: 002b:00007f926fdfbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.438270] RAX: ffffffffffffffda RBX: 00007f926fdfc6d4 RCX: 000000000045b349 [ 439.445550] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 11:55:46 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x2, 0x8001}]}, 0xc, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000080)={0x7, 0xffffffff, [{0x81, 0x0, 0x1e3}, {0x80000001, 0x0, 0x8}, {0x10001, 0x0, 0xd2}, {0x3, 0x0, 0x4}, {0x5, 0x0, 0x5}, {0x6, 0x0, 0x7f}, {0xfff, 0x0, 0x3}]}) 11:55:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 439.452833] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.460113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 439.467392] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000009 11:55:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 439.517301] audit: type=1804 audit(1579953346.381:519): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/177/bus" dev="sda1" ino=17434 res=1 11:55:46 executing program 2: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000000)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) readv(r10, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) dup2(r1, r5) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:46 executing program 5 (fault-call:4 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:46 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 440.111717] audit: type=1804 audit(1579953346.981:520): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/177/bus" dev="sda1" ino=17434 res=1 11:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:47 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x5c) r6 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) readahead(r6, 0x1, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:47 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:47 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:47 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:47 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) epoll_create1(0x80000) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@bcast, @null, @null, @default, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x1, &(0x7f0000066000)={0x0, 0xf, 0x2, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:47 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) r7 = semget$private(0x0, 0x0, 0x4434f3ff1437218b) r8 = getegid() semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, r8, 0x2, 0xda}}) fchown(r2, r6, r8) ftruncate(r0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000002c0)={0xffd6, 0x10, [0x101, 0xdaa5, 0x6, 0xb98]}) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6900) ftruncate(r9, 0x800) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8400fffffffa) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6900) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x2) r12 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0xffffffff) ioctl$RTC_PLL_GET(r12, 0x80207011, &(0x7f0000000300)) sendfile(r9, r10, 0x0, 0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r13, 0x1c, 0x0, @ib={0x1b, 0xfff9, 0x200000, {"bd1fb19dc65401f9b1552ec93d232178"}, 0x5, 0x3f, 0xffffffffffffffc0}}}, 0x90) lseek(r0, 0x0, 0x2) r14 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r14, 0x0, 0x8400fffffffa) sendfile(r0, r14, 0x0, 0xffffffff) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/398, @ANYRES32=0x0, @ANYBLOB="000000000000050002000000000005000300000000000a000800000000000200ffffffffffff0000000004000100000400000100aaaaaaaaaaaa000000000100ac14142b"], 0x3}}, 0x4000000) 11:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 441.047351] audit: type=1804 audit(1579953347.911:521): pid=31538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:48 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:48 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) flock(r2, 0x2) r3 = gettid() r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc002, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000040)={0x1, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) r8 = shmget$private(0x0, 0x200000, 0x54000000, &(0x7f0000dfe000/0x200000)=nil) shmctl$SHM_LOCK(r8, 0xb) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r5], 0x2}}, 0x10000005) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r10, 0x4, 0x6900) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x2) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000340)=0x4) r11 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0xffffffff) ioctl$IMGETDEVINFO(r11, 0x80044944, &(0x7f0000000080)={0x2}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 11:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 441.194832] audit: type=1804 audit(1579953347.991:522): pid=31543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:48 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 441.364643] audit: type=1804 audit(1579953347.991:523): pid=31543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 441.525643] audit: type=1804 audit(1579953348.111:524): pid=31547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:48 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 441.684283] audit: type=1804 audit(1579953348.271:525): pid=31558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/180/bus" dev="sda1" ino=17400 res=1 [ 441.840154] audit: type=1804 audit(1579953348.711:526): pid=31533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 [ 441.951156] audit: type=1804 audit(1579953348.771:527): pid=31533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:48 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:48 executing program 0: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) timer_gettime(0x0, 0x0) ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r1 = socket(0x0, 0x0, 0x0) connect(r1, 0x0, 0x0) socket(0x2000000000000021, 0x0, 0x0) socket(0x0, 0x0, 0x10000000000002) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) readahead(r4, 0x0, 0xb0a) connect(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local, 'tunl0\x00'}}, 0x80) r5 = socket$xdp(0x2c, 0x3, 0x0) connect(r5, &(0x7f0000000040)=@ipx={0x4, 0x4, 0x800, "76344ca3da79", 0xff}, 0x80) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 442.033832] audit: type=1804 audit(1579953348.781:528): pid=31538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/36/bus" dev="sda1" ino=17446 res=1 11:55:49 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x4, 0x0, @tid=r6}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:49 executing program 2: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x9403a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x40, 0x0, 0x0, 0x0, 0xe, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xe00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x40400, 0x0) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sendfile(r3, r4, 0x0, 0x10000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) fcntl$dupfd(r6, 0x0, r0) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000100)=0xc4ba, 0x4) 11:55:49 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:49 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:49 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0xffffffff) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000080)=[0x7, 0x200, 0x401], &(0x7f00000000c0)=[0xb7b, 0x424, 0xc82, 0x3ff, 0xac, 0x6], &(0x7f0000000100)=[0xc5, 0xbf8b, 0x7, 0x200, 0x600, 0x8, 0x2, 0xa38, 0x1, 0x3ff], &(0x7f0000000180)=[0x2eef]}) r7 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0x800) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x9) tkill(r2, 0x1000000000015) 11:55:49 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb5874427", 0x90, 0x9}], 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ftruncate(r0, 0x6) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80a00, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) 11:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:49 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='vmnet1wlan1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000180)={0x1ff, 0x1, 0x4, 0x1000820, 0x0, {}, {0x5, 0x8, 0x4, 0x56, 0x7, 0x6, "bd40db0b"}, 0xe516, 0x0, @fd, 0x1}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x3) 11:55:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:50 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) epoll_create1(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) recvfrom$llc(r6, &(0x7f0000000040)=""/174, 0xae, 0x2100, &(0x7f0000000100)={0x1a, 0x6, 0xff, 0xff, 0x9c, 0xfa, @remote}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6900) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8400fffffffa) sendfile(r7, r8, 0x0, 0xffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000300)={0x30, 0x3, 0x0, {0x5, 0xf, 0x0, 'bridge_slave_0\x00'}}, 0x30) r9 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@full={0xb, @remote, @rose, 0x0, [@rose, @null, @default, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x40, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000200)={'bridge_slave_0\x00', {0x2, 0x4e20, @local}}) 11:55:50 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2bb, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x15}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r2, &(0x7f0000000180)="4323e5258aefd94f503239a99969a943950b0b6a8940067d99790e3d4afed2d6ab887844c3692c5d510b1674d68c4849c3703f955407189d23d2005440bf6e79b2a68b6ed5d2e5c0bbf0d0cb2542824bcf44d0c02329433fdd407b6d0763f72b6936c7dbefc41f22855e521fed6ffec4008ced7bdb7204582a50900ffa88383c616555a2a293cae04b9e749ba1f6f58a74c245d34950f91452baf25394fd2a0640c75170e2271285393f7f758380f3d9f72589e03854e2ccfc841ce956184299fd33dcebbae71506cdc4fd5aefdfb91d80d7cbcef35764fb5bbf1c94a419517889", &(0x7f0000000280)=""/65}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x8, 0x6]) 11:55:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:50 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1) getpid() ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="3d7528fb32eb85e2bc84909335a78d95ff222f4eeea92f3360c641710ceedeb94e3f23e8319275de18d49f8de52ff930fc0618f266f19f35e0b73f3560273a5c9c95f8ebecfc018d75b91e52279f47349bd50fc44cd046cd97e7c03f72cb9e94f499a04ff1cf56d369c696a7c6e7001d908fde79", 0x74, 0x2}, {&(0x7f00000003c0)="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", 0x1000, 0x4}], 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 11:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:50 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 11:55:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000010800, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200028f7400f8", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) [ 444.058232] FAT-fs (loop2): invalid media value (0x00) [ 444.063596] FAT-fs (loop2): Can't find a valid FAT filesystem 11:55:51 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$ax25(r7, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @default]}, 0x48) r8 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1) getpid() ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="3d7528fb32eb85e2bc84909335a78d95ff222f4eeea92f3360c641710ceedeb94e3f23e8319275de18d49f8de52ff930fc0618f266f19f35e0b73f3560273a5c9c95f8ebecfc018d75b91e52279f47349bd50fc44cd046cd97e7c03f72cb9e94f499a04ff1cf56d369c696a7c6e7001d908fde79", 0x74, 0x2}, {&(0x7f00000003c0)="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", 0x1000, 0x4}], 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 11:55:51 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 11:55:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, &(0x7f00000003c0)=0x1277, 0x4) pipe2$9p(&(0x7f0000000340), 0x4000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x7f, &(0x7f00000004c0), 0x111}}, 0x20) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000006c0)=[{0x8, 0x0, [0xfffffffd, 0x5, 0x20, 0xbf, 0x0, 0x2, 0x5, 0x7fffffff, 0x1, 0xff, 0x6, 0x9, 0x9, 0x125, 0x1, 0xffff0001]}, {0x10, 0x0, [0xffffff7f, 0x100, 0x4, 0x1, 0x4, 0x8, 0x101, 0x3928, 0x2, 0x1, 0x5, 0x8, 0x7, 0x1ff, 0x100, 0x9]}, {0x4, 0x0, [0xc2, 0x4, 0xdf1, 0x1, 0x101, 0x5, 0x4, 0x7, 0x26d, 0x100, 0x81, 0x3, 0x8001, 0x1, 0x7, 0xdaca]}, {0xc, 0x0, [0x7f, 0x2, 0x0, 0x8, 0x8, 0x0, 0x3f, 0xfffffffd, 0x1, 0x5, 0x1, 0x3, 0x5, 0x800, 0x2, 0x6]}, {0x7, 0x0, [0xe64, 0x0, 0x9, 0x1, 0x200, 0x4, 0x5, 0x0, 0x0, 0x81, 0x1, 0x9, 0x3, 0x4b8, 0x2, 0x8]}, {0x41, 0x0, [0x0, 0x8000, 0x1, 0x7f, 0x0, 0xffffffff, 0x6, 0x69, 0x3f, 0xe9, 0x3, 0x7, 0x8, 0x6, 0xffffffff, 0x400]}, {0x31, 0x0, [0x4, 0x20, 0xfffffffb, 0xbe26, 0x3, 0x7f, 0x5, 0x3f, 0xfff, 0x6, 0x1, 0xd6, 0x7, 0x0, 0x7, 0x2ad]}, {0x30, 0x0, [0x8001, 0x7ff, 0x3ff, 0xfff, 0xb99c, 0x0, 0x1, 0xffffffff, 0x8, 0x200, 0x7fffffff, 0x512a, 0x7, 0xcbc, 0x400, 0x2]}], r8, 0x1, 0x1, 0x240}}, 0x20) semget$private(0x0, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x6, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000440)={0x0, 0x8001, 0x0, &(0x7f0000000400)=0x9}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) sendto$inet(r12, &(0x7f0000000100)="18094ee569d117ca0ac5beb4facce53b8b3ac7f40a90bd01938f7c3d85699209d92c158ff669c548a23f81500010fd3b4cf6adee9a4cd57ad0742f1d9923e5a0f232494af2e44261ef2d715836a7197148818a76810e0492b8e771b5f6457c4de3831bbc991de64573b199f3c8d1cb9ee92a7127fef4c75b9169a9870802199343c9f5491fe41bf866b2618ebb938a4680434a421171e3e83261561d4ab111a7f2f68e4a2cc3b191695b6c1a99075b79bb4bbce5e1cdff0f2ab74030ab5caec73282227775c7ebb54a54fa0e7b1f680be95f0f54dd502eb8dce845565a58e0d1b689d79f2482fec940c1cfeba4f62b", 0xef, 0x51, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:55:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 11:55:51 executing program 0: creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = gettid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="666401000000abd3f1000000", @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x404300, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x7f, 0x0, 0x26, 0x99, 0x0, 0x1, 0x8000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x10, 0x5, 0xfdf, 0x4, 0x0, 0x836}, r0, 0x6, r4, 0x2) 11:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:51 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:51 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) socket$key(0xf, 0x3, 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x52005) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0, 0xa1, 0x1000}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'sha512-ce\x00'}}, &(0x7f0000000100)="4f00d199f5da595c50d61668403f699a9518ab4184284d0260cbad3f5f79e2991ea921be6fca61874cd4db1622a7aa5d54c25c6b7255ad1900a21341dd408b4334a0f347d002b1d89f76168f04acc5c772e5f0d6dff862f4a1d8977a7a9675f9e112cc7da6b95f6aeec192244d6a55e34f0dc53d64b14e06fac3736fe91db03e37c20ed3c24696214d337f95e1dfa3562bedacfc1078572af03e6b019246d5459d", &(0x7f00000001c0)="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") socketpair(0x23, 0x0, 0x4, &(0x7f0000000000)) 11:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:51 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 445.112015] kauditd_printk_skb: 13 callbacks suppressed [ 445.112033] audit: type=1804 audit(1579953351.981:542): pid=32340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/40/bus" dev="sda1" ino=17479 res=1 [ 445.150965] audit: type=1804 audit(1579953351.981:543): pid=32348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/40/bus" dev="sda1" ino=17479 res=1 [ 445.178428] audit: type=1804 audit(1579953351.981:544): pid=32348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/40/bus" dev="sda1" ino=17479 res=1 [ 445.205239] audit: type=1804 audit(1579953351.981:545): pid=32348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/40/bus" dev="sda1" ino=17479 res=1 11:55:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0xe) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 11:55:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:52 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r4) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000001500)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000014c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0808f09d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x9) fstat(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000001, 0x4, &(0x7f0000001300)=[{&(0x7f0000000180)="e906532cfedbad9d4b1cb1c6321381f1841ec5daed654f1cbfb619f2c3ca279368ce540fe710e5d35e744eacd056b5c68563e5e9aec69475540e76696648ee624a370d5a17b17a6ebe3eb86ef04705d02f474e0a171dba792ae8a9ed08f24325608b4a9be57c261c80184f3ce642ae9645a000715cc8204cff16ce6371c8fdc487c17471b6088c9f3d99a4ad64bcd229086477e48df85aa80dec7306f001df7f96751b17e02384f5d2949278b2c1ba7fe9a54dcf4fd4aee699a0a1f9443e42a1fdab36e47702e63fc922b862e7d07aa65a50bd70", 0xd4, 0x8004}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f00000016c0)="49ec6aabb636892aca66c127d77e26e18b19386a9776aa3d3133c3a872d1b83d76ff9b626d04eb278f52d8cc332aaef3c3753b4db291247ff948eab10400000000000000768a8c2834c2a02ed23fe5642ba7029d5d6e8257f82b83a19702b0f65506cb9d546b1c6d736a3acf28e32419072a7d940961b079d42fe18dc12bed8c2d2d8cc149c0b34569", 0x89, 0x4}, {&(0x7f0000000100)="8f4875", 0x3, 0xff}], 0x11452, &(0x7f0000001540)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@umask={'umask', 0x3d, 0x6}}, {@part={'part', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, r7}}, {@uid={'uid', 0x3d, r8}}], [{@subj_type={'subj_type'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '\xa9dM\xb6j6\xb1\x189\x85\xc6\xab\xf3\rs\xd5\xc2*w\x9c\xfc.\x8c\xe4\r\'\xc5x\xa9?\xe2#\xbd\x906\x8e\x95w\xa4K\xb32\x00\x87\xa5O\xea\xb1H\x00\x02\x00\x00\x00\x00\x00\x00\xea^f\\@\xe6D\\\xe1XCr\xea\b\xc2\xa6\x14J\xf52\x93\xda\xe3\x8f\xfdQ\xe1\x90p\x95\xbcm\x1e\xf4\x11\xd9{\xe0>\xc7\x8eMiJf+O\xc5Vn\x1e\x9a\xe4W\xb3\";oa\xa0\xebo\x04q\x9b\"\xb6\xef2s\xa9\xfa\x02\xd0\"!\xb6\'\xd6\r?\xe2\xfe\x9a\x17\xb4\x97\x85\xcc\xd7p\x00\x1e\xc7}\xbf\x91\xb9\xb8\xcd\x8aJ\xd2q\x1ecFg\xdf/\xe0v\xf1\xec\x13\xd4 \xd6\xdb\x836\x92\x82\xf6\x1f\xd8f\xf7'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-!/}1trusted'}}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r11, 0x7004) tkill(r2, 0x1000000000015) 11:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:52 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:52 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 11:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) flock(r1, 0x2) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$getregset(0x15, r7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x0, 0x1, 0xffff, 0x7, 'syz1\x00', 0x6}, 0x4, 0x3, 0x7ff, r7, 0x3, 0x0, 'syz0\x00', &(0x7f0000000180)=['nr', 'md5sum^:&@procsecurityuserem0\\ppp0selinux#-*posix_acl_access\x00', 'syz0\x00'], 0x44, [], [0x2, 0xb9b2, 0x7, 0x4dbc]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000009b4c92dcadd3eac6a20ad5e01deb0119c7b23ed0c6261a6d5c853072200bd70b63fb883cd5620edd83b5d8b4d5cbd15563e678b53c4454a58708dc65858b6726992b78afca1d86ecc29166cf67571372528b01ff33c3f25e7a692588f505fe34ab8f74fd99ff00de86eb702fbe1d0c89a16877fa779aeeff2bb832d622c4fb39ae59eb8f0a61631b156df49b88bd4c000690e0ec008123beff42d20e5daf931a5c1798969b0469f695a46e835bc4f2f4ed4a98e7d6f333b671d93fadc24bf361b4050000005d16add4d7de334804bf0ba2e4d1080934e1aeff49a0211850369d06e24500007148f0d6f38d37c8bfdbb8dfc7a51968a1c86942399452e693d8126ee852208debcb6af8ddd6ab68f3cdeecbe1b142f11c5bf87584bf96", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r13}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r13, 0x3339, 0x61b671dc}, 0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r9, r10+10000000}, {0x0, 0x9}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f00000002c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xf937, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) tkill(r3, 0x1000000000015) 11:55:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xbb02, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfeff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0xc000, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000340), 0xffffffffffffff47, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 11:55:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:56 executing program 0: r0 = socket(0x10, 0x80002, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c8000001000050700e4ffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800a00010063666873690000000c0002800800010000080000"], 0x3c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0xa, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x34, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x2d, 0x1a, 'keyringposix_acl_access&posix_acl_access\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x846}, 0x50) ioctl$RTC_UIE_ON(r1, 0x7003) 11:55:56 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ff7000/0x9000)=nil) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0xffffffff) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000000)={0x6f, "da2bb19666cabf3806fa866b1fe09ae00c548d9d70d08ab0c81e995a50483bf16a2c38b0d777f8ecff0bb1132f4f307cf1abf930f81d0ec0f8191996ec55a6f2352b430806bcabc486c1c791e3815574b3f0f3bcb08bbf79580336941dd34cb79cb4aa8996be7c49615ca087ad5caaf27fb05f074bb684bdf84ef63e334f1c4f"}) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$getregset(0x15, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$getregset(0x15, r8, 0x0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) tkill(r10, 0x40) 11:55:56 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r12, 0x0, r11) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c004500a, &(0x7f0000000300)) readv(r14, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) fcntl$dupfd(r3, 0x406, r14) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r16) socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r17) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r19, 0x0, r18) r20 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup(r21) getsockname$packet(r22, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r20, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a57aa415000000000000d6000000000000000000bfa680b282a98019ffc508f605b5681ee6d2e192c612f5176ecfb106e6ca0d4ab218d5dbc6eb853454b7d6a607828f4fb4cd72f22f48ddcf6509a5e5700fcb9556800e3c14308fe3255526baa7f3ce18493b5cceb6cfbcaf7f37657f6713eff344aa1689b27c6b1cdd723a14a25000"/146, @ANYRES32=r23, @ANYBLOB="00000000000000001c001a8018000a8014000700fe880000000000000000000000000001"], 0x3c}}, 0x0) 11:55:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffe, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 449.580193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=750 comm=syz-executor.2 [ 449.592343] audit: type=1804 audit(1579953356.451:546): pid=748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/191/bus" dev="sda1" ino=17500 res=1 11:55:56 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000000d=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB="2c67726f1a35cb86f144", @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x7}}, 0x18) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) fallocate(r1, 0x3, 0x100, 0xfffffffffffffffe) 11:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:56 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4cf670b682400000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={r3, r4/1000+10000}, 0x10) 11:55:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 450.242248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=953 comm=syz-executor.2 [ 450.360283] audit: type=1804 audit(1579953357.231:547): pid=793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/191/bus" dev="sda1" ino=17500 res=1 [ 450.404532] audit: type=1804 audit(1579953357.231:548): pid=788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/191/bus" dev="sda1" ino=17500 res=1 11:55:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x40000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x200000000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') write$nbd(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) mq_open(&(0x7f0000000200)='rpc_pipefs\x00', 0x1, 0x30, &(0x7f0000000300)={0x4, 0x101, 0x8, 0x2}) r1 = gettid() setpgid(r1, 0x0) gettid() setpgid(0x0, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/140, 0x8c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x40) mkdir(&(0x7f0000001240)='./file0\x00', 0x82) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='cramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x5}) r2 = syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0xc98, 0x5b710cdb9818829e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000380)=0x8001) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) 11:55:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:57 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1d85) r4 = epoll_create1(0x0) flock(r4, 0x2) r5 = gettid() r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6900) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r6, r7, 0x0, 0xffffffff) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) dup2(r0, r4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000015) 11:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:57 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80001) read$dsp(r0, &(0x7f0000000240)=""/10, 0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000680)=ANY=[@ANYBLOB]) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)={0x1ff, 0x8}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r5, 0x0, &(0x7f0000000180)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x0, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r1, 0x0, 0x40fdf) [ 450.637450] audit: type=1804 audit(1579953357.501:549): pid=1053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/192/bus" dev="sda1" ino=16593 res=1 11:55:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:58 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80001) read$dsp(r0, &(0x7f0000000240)=""/10, 0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000680)=ANY=[@ANYBLOB]) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)={0x1ff, 0x8}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r5, 0x0, &(0x7f0000000180)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x0, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r1, 0x0, 0x40fdf) 11:55:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 451.380553] audit: type=1804 audit(1579953358.251:550): pid=1053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/192/bus" dev="sda1" ino=16593 res=1 11:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 451.547415] audit: type=1804 audit(1579953358.251:551): pid=1065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/192/bus" dev="sda1" ino=16593 res=1 11:55:58 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ftruncate(r0, 0x208200) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000001d40)='security.ima\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0400"], 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x800, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb7e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x219}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x3c}}, 0x40001) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xac43}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x54}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) 11:55:58 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x28, 0x2}, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9, 0xfffffffe}) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="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"], 0x80}}, 0xabf2f74ceb9ddf1f) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x40, 0x0) r12 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r12, 0x4, 0x6900) ftruncate(r12, 0x800) lseek(r12, 0x0, 0x2) r13 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x8400fffffffa) sendfile(r12, r13, 0x0, 0xffffffff) r14 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r14, 0x4, 0x6900) ftruncate(r14, 0x800) lseek(r14, 0x0, 0x2) r15 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x8400fffffffa) sendfile(r14, r15, 0x0, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r10, @ANYBLOB="000129bd7000fedbdf250200000008000100000000000c00020001000000000000000c00050002010000000000000c000400060000000000000008000100000000002c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800010023d7164a7c67fe0a3b2cf9f30e6f1735cc92f4542883cd1c205e4dea6909d00388b3340f7f7cc865173c04b1aba7b8145e1dd303d8b7782d8a7641c341028cafdab00c0fd80b7c221611e91a675cda73f23a32ec62728ae1a0bc533d6fac9f442939e3b0d8b9fa94f93db772e017aba670f6c88cf96827a645a7", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="0c00020001000080000000000c0005000800000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x20008876) timer_settime(r7, 0x0, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 451.749185] audit: type=1804 audit(1579953358.621:552): pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/48/bus" dev="sda1" ino=16561 res=1 [ 451.909778] audit: type=1804 audit(1579953358.681:553): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/48/bus" dev="sda1" ino=16561 res=1 11:55:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 451.938219] audit: type=1804 audit(1579953358.691:554): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/48/bus" dev="sda1" ino=16561 res=1 [ 451.966373] audit: type=1804 audit(1579953358.701:555): pid=1354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/193/bus" dev="sda1" ino=16609 res=1 11:55:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:55:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 452.062128] audit: type=1804 audit(1579953358.871:556): pid=1387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/193/bus" dev="sda1" ino=16609 res=1 11:55:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:55:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @ipv4={[], [], @dev}}, r1}}, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, 0x0, 0xf944fda59bafd24b) socket$inet6(0xa, 0x5, 0x0) 11:55:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:55:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) lseek(r0, 0x0, 0x2) 11:56:01 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@type={'type', 0x3d, "5e62852c"}}]}) 11:56:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) 11:56:01 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/136, 0x88}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000001180)=""/42, 0x2a}, {&(0x7f00000011c0)=""/238, 0xee}], 0x5, 0x8000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r0, r2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 11:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:01 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) getpid() openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) 11:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:01 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 455.041481] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 11:56:02 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x36) fcntl$getown(r0, 0x9) 11:56:02 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:56:02 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x4]}, {0xffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r7, 0x0) sendmsg$sock(r8, &(0x7f0000000640)={&(0x7f0000000000)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="1ccba14a1222cd7d9812ff3de9e89fe3c3308c8e8023c88f7f892b9647f27e56c6cfefa6400931f671065803a75898dd1ee521bc09475adf9047c6d3fe932fbb49e8f2fe018b43ffd1b05bae811bfafcc8e15ed3e883376104b0d0fab7dfef2dd38a0997ed63c94b729c15e51a88b5a027bcd3951bbb5267dcf2aa8b92eecd681c61f505e2e4a7fe9b14db21302aa14ea8a408097c3c6360d8f4354a8500f0accc1ae76325110166be3041742114696a5ee413f97a3712a1c40518b7c04e0b762219a5704e9e2742fd80af1bdc61621960598a6a2b6e525708618950291431b4f0b0bef9e2487e121c51345da98e", 0xee}, {&(0x7f0000000280)="0152e7a2ab5c5be1763b1183a9f5b47245811a3d5be64db16542b3ea932313ea8f11b2ee1d9d94b45bfa1c66fd08c47354247c715a0b5369d6735d4228586ff0438d24ae2ab6f3debbd02e5007440a4519041d19358ed3b88045dcdf8fdfb0f3dd96d2d4dc7ef7385af2c2bfb177cdc86323c3c0fa26b8b9cd41a3395f2bcfe8af142e5baacabdd77814f0b8cc5bc14404fce2bc407161afb9c970ea613bd4a15d72a53d6d0f37e00d9aebcb016b54547f165695b8985c1d3bcd46036d9c33aa4b", 0xc1}, {&(0x7f0000000080)="87e9962536e2ccb9483aaa23bf640d087288ca8acdbabd6bf7", 0x19}, {&(0x7f0000000380)="8ef8532426957b137ce25711f34c9c9a209889f8d86dc2f67b83322a5aeff901bcfb599b1634d97f89fb7b4970e533f18403b66e10268574c282da945ae5ee64b35d1c1076e0d6657daa778205a6f5182e8aea21307f1027e14cb2a8b7008726cec8ee28dfbfd516ec37169f3c6d67d5ae96e9c6666553180745c979e7e9753f22b48badae1eb8a17801b5dd577efb7c9527a9f5a25917093897dbaa5f943bfd54f2a3e78889a641e4638996b8b5f19ed85554378ca03bc3307bbb", 0xbb}, {&(0x7f0000000440)="79a665c00629172002a9768cc7041a1c84bc935b7430816ce1e83bbb1b07c5fd3336b252ffdacc1a9c0dee358426f39b6fbeb4e2afa3e3d35c333a1cfd546ee96267f6547fc95ada65bd35584dac395f274bb093db38cc253190ef9e1381b341f540a32915c55b3946b62bc509331b07bb13e91f216a9c7df30ac0fe1c90b3da4418047d7ded81b1ea8a8c7a42289fd108080924acba38b8dd56149887d9e51f064fa298b55874878871", 0xaa}, {&(0x7f00000000c0)="c6d96bf137e5c7ab37a6f2dc274a49e1a45f052e682795399522c146ca5319c9736f9c5cbac03cf1e693fcd01de32beb49006b698b8d4816c793370e720454fed9b324078f22d163fef2dcf37cb542a5b1ee27a5352bfc037fed7f7ff7945fcbc28d5bf092ab82d93bb8ead982ee526c57e4cb106253", 0x76}, {&(0x7f0000000500)="af78a53bdafe7bcc7f93c5975a7513f90185d36a4e916fe451c2831ed2e23e596da0abd5472ad4caaf302d6664d811c03bbc8a1e86a643aee70d0084bd56d1484803053e2adb6914ec08957457fabecd", 0x50}], 0x7, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x18}, 0x4008010) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:56:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2804) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="1e", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) close(r0) 11:56:02 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:02 executing program 0: syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@type={'type', 0x3d, "5e62852c"}}]}) 11:56:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:02 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x40000) 11:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 455.887693] Cannot find add_set index 0 as target [ 455.949017] sp0: Synchronizing with TNC [ 455.979207] Cannot find add_set index 0 as target 11:56:03 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000015) 11:56:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000440)="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", 0xc16}], 0x1}, 0x0) 11:56:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 11:56:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11:56:03 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ftruncate(r3, 0x8200) getresuid(&(0x7f0000004180), 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001040)) io_submit(r5, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}]) 11:56:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 456.685275] kauditd_printk_skb: 5 callbacks suppressed [ 456.685293] audit: type=1804 audit(1579953363.551:562): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 456.848579] audit: type=1804 audit(1579953363.601:563): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 456.902077] audit: type=1804 audit(1579953363.601:564): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 457.023875] audit: type=1804 audit(1579953363.621:565): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 457.057812] audit: type=1804 audit(1579953363.691:566): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 457.085081] audit: type=1804 audit(1579953363.691:567): pid=2382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 457.111931] audit: type=1804 audit(1579953363.701:568): pid=2382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 [ 457.138723] audit: type=1804 audit(1579953363.701:569): pid=2292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir712750115/syzkaller.9iuuIM/53/bus" dev="sda1" ino=17377 res=1 11:56:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000bde3"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local, 'team0\x00'}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000440)="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", 0xc16}, {&(0x7f0000000140)}, {0x0}, {0x0}, {&(0x7f0000001580)}], 0x5}, 0x40000) 11:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x55db871bed5c4ae5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000440)="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", 0xc16}, {0x0}], 0x2}, 0x0) 11:56:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:06 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x102, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb843f0335c1b657e, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6900) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8400fffffffa) sendfile(r8, r9, 0x0, 0xffffffff) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000080)={@local, @multicast1, @empty}, 0xc) readv(r5, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 11:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 459.613066] audit: type=1804 audit(1579953366.481:570): pid=2529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/198/file0/bus" dev="sda1" ino=17457 res=1 11:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xbb020000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1b2d5688a9174fcb9ad8fbd956bab457e1eed1ce4abe125902603453a15f9b42e1a2c09c64e79f0fb0f766e12b1234e14b4dcc1b3bf4daeb585af31f2b6c57e12629ea46cf8ab3b73f4e1b21e28bb709462f4d47266db142a845bb2df1ae"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:56:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 459.795284] audit: type=1804 audit(1579953366.581:571): pid=2518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir039327359/syzkaller.PwGQ3d/198/file0/bus" dev="sda1" ino=17457 res=1 11:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfeff0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000f465000000000000001fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 11:56:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:07 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) socket$packet(0x11, 0x3, 0x300) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r5 = dup3(r3, r4, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xff0f0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0), 0x7ab, 0x2, 0x0) 11:56:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x480040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 11:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) 11:56:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000020601000000000000000000000f00000c000300686173683a69700005000400000000000900020073797a30000000000c0007800800064000000000050005000a00000005000100070000005940549438a8f697f8c9ec2033a8cfeed79490ab62f69f02ae7185265c589998e38f72170c57e90afd13faa9bbc2c1a6a8669d4934a08997745bcccc2e4369632c24"], 0x50}}, 0x0) [ 460.684590] rxrpc: Assertion failed [ 460.696631] ------------[ cut here ]------------ [ 460.701413] kernel BUG at net/rxrpc/local_object.c:437! [ 460.751163] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 460.756586] CPU: 1 PID: 8066 Comm: kworker/1:3 Not tainted 4.19.98-syzkaller #0 [ 460.764040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.773492] Workqueue: krxrpcd rxrpc_local_processor [ 460.778617] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 460.784245] Code: 7f 08 9f fa 0f 0b e8 e4 a4 b4 fa 48 c7 c7 c0 12 5d 88 e8 6c 08 9f fa 0f 0b e8 d1 a4 b4 fa 48 c7 c7 c0 12 5d 88 e8 59 08 9f fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 460.803154] RSP: 0018:ffff888050a57ce8 EFLAGS: 00010282 [ 460.808525] RAX: 0000000000000017 RBX: ffff88804c4ee038 RCX: 0000000000000000 [ 460.815799] RDX: 0000000000000000 RSI: ffffffff81558b76 RDI: ffffed100a14af8f [ 460.823078] RBP: ffff888050a57d30 R08: 0000000000000017 R09: ffffed1015d25079 [ 460.830366] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff8880857621c8 [ 460.837638] R13: ffff8880a57706c8 R14: ffff88804c4ee000 R15: ffff8880946fc000 [ 460.844912] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 460.853139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.859023] CR2: 0000000000960004 CR3: 000000008cb24000 CR4: 00000000001406e0 [ 460.866295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.873569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.880831] Call Trace: [ 460.883427] process_one_work+0x989/0x1750 [ 460.887678] ? pwq_dec_nr_in_flight+0x320/0x320 [ 460.892350] ? lock_acquire+0x16f/0x3f0 [ 460.896333] ? kasan_check_write+0x14/0x20 11:56:07 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) 11:56:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 460.900573] ? do_raw_spin_lock+0xd7/0x250 [ 460.904822] worker_thread+0x98/0xe40 [ 460.908623] ? trace_hardirqs_on+0x67/0x220 [ 460.912947] kthread+0x354/0x420 [ 460.916318] ? process_one_work+0x1750/0x1750 [ 460.920821] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 460.926360] ret_from_fork+0x24/0x30 [ 460.930067] Modules linked in: 11:56:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) 11:56:07 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xffffff0f00000000, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) 11:56:07 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0x3, @loopback}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup2(r0, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000100)={r10, 0x100000000, 0x3}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r11 = openat$cgroup_ro(r8, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r13, r12, 0x0) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000280)=0x0) getpgrp(r14) ioctl$PPPIOCSMRRU(r11, 0x4004743b, &(0x7f00000000c0)=0x4fae08c6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r16, r15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r17, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) r18 = semget(0x1, 0x3, 0x0) semctl$GETALL(r18, 0x0, 0xd, &(0x7f0000000200)) tkill(r2, 0x1000000000015) 11:56:08 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x17}, 0x4, 0x0, 0x5, 0xd, 0x0, 0x72f1eaa5, 0xb33}, r1, 0x0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0xff, 0x8000}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101002) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r5, 0xc01456b8, &(0x7f0000000080)={0x0, {0x14}}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) dup3(r7, r8, 0x0) dup2(r6, r10) [ 461.140978] ---[ end trace bbb562ea8066f007 ]--- [ 461.153555] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 461.181547] Code: 7f 08 9f fa 0f 0b e8 e4 a4 b4 fa 48 c7 c7 c0 12 5d 88 e8 6c 08 9f fa 0f 0b e8 d1 a4 b4 fa 48 c7 c7 c0 12 5d 88 e8 59 08 9f fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 11:56:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x480040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 11:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 461.228833] RSP: 0018:ffff888050a57ce8 EFLAGS: 00010282 [ 461.251257] RAX: 0000000000000017 RBX: ffff88804c4ee038 RCX: 0000000000000000 11:56:08 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000580)={0x6, 0x3, 0x1c, &(0x7f0000000540)="fad50ef8883785db8250b55eb67b63ee434c880bf252508c5ad462a2"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000080)="c62eb5bf17ff82bfa4a3462af48cfe26844e348515e1da435af25845de8d7b0751469649850f9ad881733a9d8594c445f9ef4b2889f0a3eec5ee78c5c9e8c973c554780a66c0af27712b1705f58e1f16d750fba2de7968c30cd10acea846297cda5ce56932270dd1b3e9b32c843ffdb8e96a60a8ead5e735c68555ac21204ea2a9e0bf1135c5e8f4bf78c1673ebef76cb68d3b6bcbca362cc259e7c71fef307d", 0xa0, 0x3}, {&(0x7f0000000180)="ff9804bd3f56059d1164d367a8d18d0388c5dcec891a741e9563ce2ff2a77fdd2ec626b6791e392fedd239e5f440e58a65cd7416a3fd13b57ae575925cbac5592c1159cf84d9fa66ffcf7b689d065aca453761d0652259131ed56768b4ca885460cc9d097a02865056a563073760e14506f52cdc7ef668a75f4903502defef193d54ada3cc1485484bff3e53abeafa99c5ae0404a117061fd555899d6a9d18766f246b9249408edc512070274c67cdfc8bf063356619814bd3513d877e5864d094293dfd7c48e953f5ebf7820d1208ace179c43655f773409053040c7e0e97fe520ef450581f7ce36045f77956d9ca06dd", 0xf1, 0x1}, {&(0x7f0000000280)="1a9eb4e31e3e74fc8a4d13e973ebb13020eba5ac7733bc288aaf5938ea214f19d947888ee8ceefc7011dc4bc2a961b4e0380a0de99557dc3422cc1f975f6e6ae7cfa53b21a5d9284d04da22fca3043b210408d7b6fa67daf84acd8c9738989461a540ee902f3f1d094918a567cf3afebd3d927cfebf9837b807fe1ec7d998714effcaa745c18ceeccb7f9f2123d5347037a2f8263b7739302726882ab6f2670ff1b44cf1ebac461357af799e7b5199a07a2fa106c902f8c5ceef83e8e32e4d2ea37fd5303f4cea8ca02f378d2af318a7d02285c39d5f32a72b878183db09c4f0a53b8241081cace02d55", 0xea, 0x2}, {&(0x7f0000000380)="7f9e2c956eb285c34087ba1940e9f0a9b5bd02e01689f1770892c15c6c6fddc16a9956c297a737085c58e291b9142d0a7cd10fde9f418ddc74", 0x39, 0x7}], 0x188400, &(0x7f0000000440)=ANY=[@ANYBLOB='hostdata=@,measure,subj_user=,fowner<', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365723d7b5c21d816"]) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000015) [ 461.275992] RDX: 0000000000000000 RSI: ffffffff81558b76 RDI: ffffed100a14af8f 11:56:08 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x480040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 461.300420] RBP: ffff888050a57d30 R08: 0000000000000017 R09: ffffed1015d25079 [ 461.327225] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff8880857621c8 11:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 461.350119] R13: ffff8880a57706c8 R14: ffff88804c4ee000 R15: ffff8880946fc000 [ 461.367355] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 461.401268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.426662] CR2: 0000001b2d222000 CR3: 0000000094224000 CR4: 00000000001426e0 11:56:08 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:56:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x244c80) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="5d5c190ed1f5de00d75329002bf63975029dffb970fc3006b105ccb20bb2e30f2fcfbeffeace63d354d9e9343e84ece35b783a571f8a107ba29b93a71ad61a6110f1bbcee90e17c0dead6013b4c1ec1cb268f2b87b04337b1b93be4246e07f1dbb5957dd5fd3b36552d182d49083c32263d36b2609ba24d03bc9d851befaacd9e96aac7611555a27b9d2ca2a0937c6119225d96a167373f49cbb3d508e95ad01841e8e3e060f83a80d335ad876bd835efdb293fbf031417e7897aecc97dff50d428e1318556dc6146de77e4d537a87"], 0x38}}, 0x0) [ 461.450220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.472893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 461.491345] Kernel panic - not syncing: Fatal exception [ 461.498014] Kernel Offset: disabled [ 461.501641] Rebooting in 86400 seconds..