[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.702475][ T26] audit: type=1800 audit(1562056845.849:25): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 66.747400][ T26] audit: type=1800 audit(1562056845.849:26): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 66.787128][ T26] audit: type=1800 audit(1562056845.849:27): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. 2019/07/02 08:40:56 fuzzer started 2019/07/02 08:41:00 dialing manager at 10.128.0.26:46757 2019/07/02 08:41:00 syscalls: 2465 2019/07/02 08:41:00 code coverage: enabled 2019/07/02 08:41:00 comparison tracing: enabled 2019/07/02 08:41:00 extra coverage: extra coverage is not supported by the kernel 2019/07/02 08:41:00 setuid sandbox: enabled 2019/07/02 08:41:00 namespace sandbox: enabled 2019/07/02 08:41:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/02 08:41:00 fault injection: enabled 2019/07/02 08:41:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/02 08:41:00 net packet injection: enabled 2019/07/02 08:41:00 net device setup: enabled 08:42:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000580)=[0xee00, 0xee00, 0xee00]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000005c0)={0x51, 0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1ca, 0x7fff, 0x0, 0x9, 0xfffffffffffffffe, r0, 0x0, 0x0, 0x5}}}, 0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xeb', 0x1ff) r3 = syz_open_dev$adsp(0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r4 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x40) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r6 = accept4$alg(r3, 0x0, 0x0, 0x802) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) write$cgroup_pid(r5, &(0x7f00000007c0), 0xe) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x1, 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) flistxattr(r6, &(0x7f0000000200), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000280)='stat\x00') r8 = semget(0x0, 0x2, 0x40) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000100)={{0x100000, r0, r2, r0, r1, 0x100, 0x1ff}, 0x677, 0xfff, 0x8}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x403) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x0, 0x3, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100}}, [""]}, 0xffffffffffffff13}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) syzkaller login: [ 195.079483][ T9177] IPVS: ftp: loaded support on port[0] = 21 08:42:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) [ 195.262059][ T9177] chnl_net:caif_netlink_parms(): no params data found [ 195.326198][ T9180] IPVS: ftp: loaded support on port[0] = 21 [ 195.347515][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.355721][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.365918][ T9177] device bridge_slave_0 entered promiscuous mode [ 195.380375][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.397595][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.407262][ T9177] device bridge_slave_1 entered promiscuous mode 08:42:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 195.475815][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.501552][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.570546][ T9177] team0: Port device team_slave_0 added [ 195.621931][ T9177] team0: Port device team_slave_1 added [ 195.695345][ T9180] chnl_net:caif_netlink_parms(): no params data found 08:42:54 executing program 3: r0 = gettid() poll(0x0, 0x0, 0x8000000000000204) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 195.770988][ T9177] device hsr_slave_0 entered promiscuous mode [ 195.817863][ T9177] device hsr_slave_1 entered promiscuous mode [ 195.927168][ T9183] IPVS: ftp: loaded support on port[0] = 21 [ 195.935596][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.942847][ T9177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.950919][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.958078][ T9177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.015188][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.024021][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.032555][ T9180] device bridge_slave_0 entered promiscuous mode 08:42:55 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000080)=0xe8) quotactl(0x80000001, &(0x7f0000000040)='./file0\x00', r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={0x400, 0x4, [0x15a]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 196.055482][ T9185] IPVS: ftp: loaded support on port[0] = 21 [ 196.073697][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.087154][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.096075][ T9180] device bridge_slave_1 entered promiscuous mode [ 196.201742][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.224456][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.245549][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.271359][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.305963][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.381523][ T9189] IPVS: ftp: loaded support on port[0] = 21 [ 196.411439][ T9180] team0: Port device team_slave_0 added [ 196.432148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.442385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.457110][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.471853][ T9180] team0: Port device team_slave_1 added [ 196.494913][ T9183] chnl_net:caif_netlink_parms(): no params data found 08:42:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) [ 196.535136][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.553601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.578010][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.585071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.593594][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.603300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.612560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.619722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.629347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.638987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.769928][ T9180] device hsr_slave_0 entered promiscuous mode [ 196.807917][ T9180] device hsr_slave_1 entered promiscuous mode [ 196.858072][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.867165][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.876120][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.906450][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.914742][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.923630][ T9183] device bridge_slave_0 entered promiscuous mode [ 196.934865][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.942039][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.950245][ T9183] device bridge_slave_1 entered promiscuous mode [ 196.974308][ T9193] IPVS: ftp: loaded support on port[0] = 21 [ 196.986274][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 197.013771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.024085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.032585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.041120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.086313][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.098075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.106738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.126902][ T9177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.152631][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.233170][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.241522][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.250076][ T9185] device bridge_slave_0 entered promiscuous mode [ 197.265682][ T9183] team0: Port device team_slave_0 added [ 197.274189][ T9183] team0: Port device team_slave_1 added [ 197.293921][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.301264][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.309353][ T9185] device bridge_slave_1 entered promiscuous mode [ 197.332010][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 197.370714][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.382818][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.455268][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.521191][ T9183] device hsr_slave_0 entered promiscuous mode [ 197.578452][ T9183] device hsr_slave_1 entered promiscuous mode [ 197.662495][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 197.692826][ T9185] team0: Port device team_slave_0 added [ 197.701740][ T9185] team0: Port device team_slave_1 added [ 197.711881][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.720017][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.728818][ T9189] device bridge_slave_0 entered promiscuous mode [ 197.755680][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.763581][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.771953][ T9189] device bridge_slave_1 entered promiscuous mode [ 197.835108][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.911242][ T9185] device hsr_slave_0 entered promiscuous mode [ 197.947997][ T9185] device hsr_slave_1 entered promiscuous mode [ 198.031600][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.071823][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.096881][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.113044][ T9193] device bridge_slave_0 entered promiscuous mode [ 198.145501][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.164214][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.171563][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.179681][ T9193] device bridge_slave_1 entered promiscuous mode [ 198.196824][ T9189] team0: Port device team_slave_0 added [ 198.220532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.228550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.265869][ T9189] team0: Port device team_slave_1 added [ 198.288764][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.326122][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.340990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.350151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.361584][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.368751][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.411071][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.452129][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.468705][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.485079][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.494006][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state 08:42:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000580)=[0xee00, 0xee00, 0xee00]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000005c0)={0x51, 0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1ca, 0x7fff, 0x0, 0x9, 0xfffffffffffffffe, r0, 0x0, 0x0, 0x5}}}, 0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xeb', 0x1ff) r3 = syz_open_dev$adsp(0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r4 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x40) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r6 = accept4$alg(r3, 0x0, 0x0, 0x802) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) write$cgroup_pid(r5, &(0x7f00000007c0), 0xe) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x1, 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) flistxattr(r6, &(0x7f0000000200), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000280)='stat\x00') r8 = semget(0x0, 0x2, 0x40) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000100)={{0x100000, r0, r2, r0, r1, 0x100, 0x1ff}, 0x677, 0xfff, 0x8}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x403) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x0, 0x3, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100}}, [""]}, 0xffffffffffffff13}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) [ 198.501220][ T9195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.510837][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.550963][ T9189] device hsr_slave_0 entered promiscuous mode [ 198.567367][ C0] hrtimer: interrupt took 58410 ns 08:42:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/43) mbind(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7, 0x4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='\\mime_type\x00', 0xb) [ 198.599004][ T9189] device hsr_slave_1 entered promiscuous mode [ 198.667545][ T9193] team0: Port device team_slave_0 added [ 198.682277][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.710557][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.747100][ T9180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.763911][ T9180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.779104][ T9193] team0: Port device team_slave_1 added [ 198.807120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.816561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.825651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.839461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.848735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.857593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.866412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.875996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.885086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.893528][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.911738][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.950178][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 08:42:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/43) mbind(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7, 0x4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='\\mime_type\x00', 0xb) [ 198.962023][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.970953][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.979068][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.991321][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.000253][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.007446][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.017180][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.026577][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.036218][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.043430][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.053034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.078519][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.099367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.110492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.149064][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.176208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.194673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.242968][ T9193] device hsr_slave_0 entered promiscuous mode [ 199.252612][ T9193] device hsr_slave_1 entered promiscuous mode [ 199.270129][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.286207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.295344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.305731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 08:42:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/43) mbind(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7, 0x4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='\\mime_type\x00', 0xb) [ 199.350178][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.359690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.369506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.383417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.390634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.391495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.408459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.417014][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.424228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.432209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.442483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.453478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.462435][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.471697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.484892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.508983][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.555302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.570599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 08:42:58 executing program 1: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f00000001c0)="a2"}) [ 199.611562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.625168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.634667][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.644001][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.668936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.678846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.688310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.699180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 08:42:58 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="3f20633d4c4713dddea4957e426015463b58f95d65a0d835f6db8f8752989b768df8b7cd7f5f043a2a7f77c4b937823d6df288b17ca07dc070679eda8028b5d5bddd76ae795b254fcc1ace22602ec11bdd482ed05280a50e941e165010e7f3f44a2375c2e7e8bb33a469980cf965273eb7f2a140b10bc905160431260e800c99", 0x80, 0x80}, {&(0x7f0000000300)="192302d2f1cc90e6da99d947b6ef771287701459076001fee341e0e935506d7c7d72db2369fd709e2745d2eb81df56498d909b034fa4c2491b91cb33a5a314cb5bc71442f228eb7daff8bc5ee5551333edca3d6e6ebf035b9e2327dc6deec08e55696c3d2e9781d10e4f5af833618b48563a652d7820f7a97eb96373bc5fa2b8fe7c66347213cd22735a87bbd08f04832f316754ce4c9d14bad567131432bd96", 0xa0, 0xdb00501}, {&(0x7f00000003c0)="97c14470549d40b1ddbe6d324c67ceef8bff3eff31cd47a342b29fed01a30012c47717ea574ff0c53783db21c966194806c5eeb1f9db730c68f74f765cbbaac90f3906c79eb32018f4284a22dac113561d28fe8f7b6c9e874a519a1295bbc1f801fcc747e6574a2da75eeeb3ccfd779c7c0cf72d87ef963251f32281c7764e46334d65bc145fa4b3079037ea26e787c6f667e38aee8d7cd893336892069f71b09a8eaf95f63e7dea3b9dfacf14356204340610b62e89ad5398f7e697d596879e91d06ff217494fd4a33ee26d62dd2cf2f1d6", 0xd2, 0x61}, {&(0x7f00000004c0)="bf03c23491954badedcc6203ad9d8e6e635a399e5a61e2584e465540a8a2a43bc68846387bc38b9b772f117f56057b142d0f074c415a3bfe27173769e8ff0d33a5ae6a0a10885325c5ac740a4fcb5533de0e65e04c5ad755f58fedcd32254dc9177ac3c47ee9defae58d8862c5a5046edc6f14892929137331471677da507766b815627390f69be96ef71a471eb0002657f00c693b53274b9462b479aa5b6879ccfbfacdca1d211b8b4b9e3fa61a45e86da43d38362eee800a25ad6c9e192fceefddc82739d2c06df98e1fb48a59a0ccb4ec6c8ec8ddc4fe4faf194150dc07", 0xdf, 0x81}, {&(0x7f00000005c0)="223e9e9e065bf8f9e47b167771d4e23deb708924723da1ae8094a8b01774d02c97a89abec651886f28da948e673739607949937745a0c579ec1352f5fd40b6f58b3c1092af1661a79665ac6e15e9b24b29cc987dbc859cfde63b5e614475bcc6467e529d97601f04dc2468ce7ecce7f6ddc328da3fc2df22555168ec9c1d", 0x7e, 0xfff}, {&(0x7f0000000640)="ebded1502ad7921b9c91e337d3b8a25f1bbd61b4e620ea6d84c8ce87c75598bda9b220e352fe8f349b1b3c3fbd89d14fed27faf01e2db26a12a3e3527ab12e378a43321443d4900bd31467bfaaa89e6abc44294f06486f34b61fbd46c660c66452a9b0f11e4562d050e9652da7fedbf3b362", 0x72, 0x1}], 0x2000, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0xdbb}}, {@errors_continue='errors=continue'}], [{@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, ')^{ppp1'}}, {@obj_type={'obj_type'}}]}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)='\x00', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc}, 0x14) 08:42:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/43) mbind(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7, 0x4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='\\mime_type\x00', 0xb) [ 199.739652][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.829719][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.839098][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.894864][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.928448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.936565][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.952291][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.966350][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.992576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.010771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.028854][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.035997][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.060580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.069991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.086170][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.093396][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.156648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.169784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.195444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.214867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.250309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.276953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.299071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.319314][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 08:42:59 executing program 0: r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000480)="ac0200000000000000d5f657b96cfa511312bfc2b022c027b30c526628cb449b04987faba4b68acbb20669eb18a7b9666f64de9c494c2176dbf884ced82bec0ba5afda8a05fa44bc30c27393a0d42e6f4b96a6639bd895d3", 0x58, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="bb"], 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="c0dca5055e2cc48b7be070") r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xdc, "b88fc465b7b44980dcdca14d122080f15e693334573236c5d02d3d10a8c636ae625ced963f1377d5fbcc69bad9a03b8573f31f7155a83f749f59c0f2cfa147e22183788041fca0948cf8536fc397f9ea4f5b81c0f3531949f3ff5054aecaa5dc930c42686a729285348fe31e8c91538902026df40a82282f211d15c4f1fac02031decdec4fb1ae90dd1a3b4b461aced1b070355fc4683343f70ef1d87d54e72f59460d2f793e2aaeaab145abf5f71b50fa724174b4b574a7a441763d32255c624e51c102ee7ac1ab9ddd2ad5ecca0310506ff11b3f49491af0dcea16"}, &(0x7f0000000280)=0xe4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r3, 0x0, 0x3, &(0x7f0000000080)='syz'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000700)={{0x3, 0x0, 0x4b, 0x6, '\x00', 0x10001}, 0x5, 0x323, 0x9, r5, 0x5, 0x7, 'syz0\x00', &(0x7f00000006c0)=['-nodevposix_acl_accessposix_acl_access!\x00', 'bdev\x00', 'user\x00', '\\keyring\xf4\x00', '}\xdb\x00'], 0x3f, [], [0x2, 0x7, 0x46f, 0x87]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000600)={r4, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x4, 0x4, 0x100, 0xd1c}, &(0x7f00000002c0)=0x98) r6 = gettid() ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000000040)={&(0x7f00000001c0)="0d9272b05f2d98b45091514c67457799bbb267c22e6df6775caa7ce9534fac4efdb5afa2520ee59a5729264b248da36f239385faca9947a4f4210aea035a28ba0bd0d6496d50896412f0b60be16826ea898a8b5e00257bdcd3082196bd3fca43d7cc7bf13da2b29a1decb50c7fcdeeba41be42bdd0a2977243a905212a90f93674f13c201a1dbc7e06a44c93db368f52889bbc98b55d7a4872aa9b0808ce22afeedb21d9857423e6c668b190ebf6d6", 0xaf}) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x2, 0x8040) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffffa9, 0x0) [ 200.326272][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 08:42:59 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fd) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x440c80) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0x3c0, 0x0, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x0, 0x200000002, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x700, 0x2, r5}) [ 200.372520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.413450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.468303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.488247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.495914][ T9269] mmap: syz-executor.0 (9269) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 200.518444][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.525548][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.566114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.575504][ T9273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 200.582625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.603198][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.628207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.636864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.690096][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.718425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.740000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.781725][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.788951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.831721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.870581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.899753][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.908828][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.917447][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.926303][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.936124][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.944943][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.953465][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.971227][ T9193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.982882][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.995604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.004348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.015912][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.040646][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 08:43:00 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="15000000240cd94393118d1ea75b9cdc041ae4d180530e399c4b73384807"], &(0x7f0000000040)=0x1d) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x40, 0x400000001c5, 0x1000aed}, &(0x7f0000000100)=0x10) [ 201.402944][ T9299] binder: 9294:9299 ioctl c008551b 200001c0 returned -22 08:43:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='(\x92\x00', &(0x7f0000000280)='$systemppp1self&![+/security\x00', &(0x7f00000002c0)='\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='selinuxppp1-\x00']) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, 0x0) ioctl(r1, 0x6, &(0x7f00000005c0)="14c07a45cd94550fa8f3891ba9d1c8b009959af9ee52663663803ea5a120da7186a9313b67527d4cb6a0eb187bddea7c25344c28e4a3d6cadf5979959c83aa418fa84f977672737d47984fc869e8816593166d71a684833994d3afcca102e7c0141b63a262f12af4f5a3f8117797b53a0287842231173f0c4917") ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000040)='(\x92\x00'], 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000340)='(\x92\x00'], &(0x7f00000007c0)=[&(0x7f0000000580)='(\x92\x00']) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000480)=0x40, 0x8) 08:43:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x30000) 08:43:01 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xe3, 0x80000000000000d, 0x3}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0xff, 0x3, 0x8}, 0x80, 0x0, 0x7}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000140)=0x1000000003) 08:43:01 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fd) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x440c80) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0x3c0, 0x0, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x0, 0x200000002, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x700, 0x2, r5}) 08:43:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="15000000240cd94393118d1ea75b9cdc041ae4d180530e399c4b73384807"], &(0x7f0000000040)=0x1d) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x40, 0x400000001c5, 0x1000aed}, &(0x7f0000000100)=0x10) 08:43:01 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x287) lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x24020019980330}, &(0x7f0000000140)={0xa31, 0x6}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x33e) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x62, 0x2400) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x8) 08:43:01 executing program 1: socket$inet(0x10, 0x2000000000000002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x3c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 202.269139][ T9310] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 08:43:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="15000000240cd94393118d1ea75b9cdc041ae4d180530e399c4b73384807"], &(0x7f0000000040)=0x1d) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x40, 0x400000001c5, 0x1000aed}, &(0x7f0000000100)=0x10) 08:43:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x400000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)=ANY=[@ANYBLOB="3400000011000100"/20], 0x14}}, 0x0) 08:43:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) setgroups(0x582, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x68cd, 0x8, 0x6, 0xfffffffffffff488, 0x2, 0xfff, 0x6, 0x9, 0x400, 0x2, 0x6, 0x80000000}) close(0xffffffffffffffff) 08:43:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x31bd16f4, 0x11b200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x2, [0x40000106], [0xc1]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) 08:43:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000003031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) 08:43:01 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="15000000240cd94393118d1ea75b9cdc041ae4d180530e399c4b73384807"], &(0x7f0000000040)=0x1d) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x40, 0x400000001c5, 0x1000aed}, &(0x7f0000000100)=0x10) 08:43:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000000)="11fc21fa670a6750521bc2d7cfa5055e15cfec7be070") msgctl$IPC_SET(0x0, 0x5, 0x0) 08:43:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb6, &(0x7f0000000140)) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @multicast2}, &(0x7f00000000c0)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 08:43:01 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80000000, 0x210280) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '/(keyringselinux\\\x00'}, &(0x7f0000000140)='em0-$mime_typeem0-\'mime_type{\x00', 0x1e, 0x2) io_uring_setup(0x9d8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x388}) r1 = io_uring_setup(0x14b, &(0x7f0000000280)) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x4, {{0x2, 0x4e21, @local}}, 0x1, 0x7, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x410) 08:43:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff000000000000000008001900000000000a0000000000000000000000000000000000150000000000000000000a00000000000000ff0200000000000000000000000000010000000005000500000000000a00000000000000fe8000000000000000000000000000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000ff"], 0xe0}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x13, 0x74d, 0x9, 0x6, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e22}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x30}}, 0x24000080) 08:43:02 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="15000000240cd94393118d1ea75b9cdc041ae4d180530e399c4b73384807"], &(0x7f0000000040)=0x1d) 08:43:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x31bd16f4, 0x11b200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x2, [0x40000106], [0xc1]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) 08:43:02 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80, 0x20002) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0xc1b113fce3fbc913, &(0x7f0000000080)={@loopback, @empty, 0x0}, &(0x7f00000000c0)=0xc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x89, 0xffffffff, {0x77359400}, {r2, r3/1000+30000}, {0x0, 0x8, 0xc06e, 0x20}, 0x1, @canfd={{0x1, 0x400, 0x4, 0x3}, 0x14, 0x0, 0x0, 0x0, "1a013d778fdd372037846650c25bc08f28bab82ed4a287bdfb4ed8d157db8ed59f372c715b20d37626c201d33fc7eacc2cd473789b809b3e951f07918a95adc9"}}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @rand_addr="eda2762480e4bca1b0d799e5c6520836"}}}, 0x3a) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000000)=0x1, 0x4) 08:43:02 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000293fe4fcfffdffffffffff00000000000000000000000000432db7543a714ac81bc68d0dba93ede75753ef45d620d44cf8fd311327139481177f99e0e8a32f531663c6adfe53d08844211565e660d8a3a48284199313a03daa63b297abdee9c62b1b81e12d5831e44da1937fdb00e8f22a04b67e18fbdaf7c3490389accd393e0e5d1abbeb851401f4b2cdcc3df71c524c3e9db5d0241b83cdde0af34eaa523e671bea91711ff7390590be5728e224db000000001bc380499d"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000002a40)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000d40)=[&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1}]) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000200)={0x5, 0x1, 'client0\x00', 0x2, "405be9949bff386f", "63581d2bf3da52b4fa478f478e88de042efb8cdb3d78050860a191b084a0fef8", 0xf878, 0x2}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) 08:43:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80, 0x42280) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1684ac81}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000180)=0x8001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x2012, 0xffffffffffffffff, 0x0) 08:43:02 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:02 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) setreuid(r1, r0) r2 = geteuid() pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_dccp_int(r3, 0x21, 0x1f, &(0x7f00000002c0)=0x3f, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setreuid(r2, r2) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) ioprio_set$uid(0x0, r2, 0x3) write$P9_RLOPEN(r4, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0xc5, 0x3, 0x2}, 0x80}}, 0x18) 08:43:02 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80000000, 0x210280) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '/(keyringselinux\\\x00'}, &(0x7f0000000140)='em0-$mime_typeem0-\'mime_type{\x00', 0x1e, 0x2) io_uring_setup(0x9d8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x388}) r1 = io_uring_setup(0x14b, &(0x7f0000000280)) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x4, {{0x2, 0x4e21, @local}}, 0x1, 0x7, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x410) 08:43:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x31bd16f4, 0x11b200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x2, [0x40000106], [0xc1]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) 08:43:02 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:02 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xf91, 0x2000) write$cgroup_subtree(r0, 0x0, 0xffffffffffffffd3) r1 = perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) perf_event_open$cgroup(0x0, r2, 0x1, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'io'}]}, 0x4) perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x80008, 0x0, 0x10000, 0x4, 0x0, 0x4, 0x0, 0x4, 0x800, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xca4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x2734c79b, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, @perf_config_ext={0x7}, 0x0, 0x8, 0x1, 0x0, 0x6, 0x6, 0x7}, 0x0, 0x10, r1, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000440)="369cff807e1d5ac6310702158e1c521d8e215a38ae572f43b1946898ea339340fc4be0c2d9f93350a644edae7a190d0de36d42a214a3", 0x0}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12) socket$kcm(0xa, 0x0, 0x11) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) 08:43:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x34400) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x3}}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000002c0)="11dca5055e0bcfec7be070") socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000040)={0x7ff, 0x6, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 08:43:02 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x31bd16f4, 0x11b200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x2, [0x40000106], [0xc1]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) 08:43:02 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000440)={{0x0, 0x3, 0xffff, 0x3, 0x8}}) r5 = getegid() setgid(r5) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000380)=""/152, 0x98}], 0x4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={r7, 0x80000, r4}) 08:43:03 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dc86055e0bceec7be070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xa5, "d143ea2da4b0d1fe69a8d4f4ac1e90c50919db09b8b33aecd8e54d4cccb7443b84cc85084b05fbf239bd869e8a87490d113eb1c4cb1a75ca2aae64451bd2447bf1cd8afac0aecf4915d58881f2d2e60ff18bff00a1fc4f8625f7c42eed45740107d7755efa4a951cddbf06ab2e7517f562109b21b39b4620734e281cc44b6d5b1eeaa4f6afd487db55af09f540651dd26aef1fba2dae7491a76bd0c8e393bcb06b25ac9e34"}, &(0x7f00000001c0)=0xad) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x80}, &(0x7f0000000240)=0x8) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xc, &(0x7f0000000080)={r1, 0x10, 0x0}, 0x10) 08:43:03 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0x7}}, 0x5, 0x8, 0xf364, 0xf2fa, 0x94}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r3, 0x3, 0x2, 0x5, 0x3, 0x6}, &(0x7f00000002c0)=0x14) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x9, 0x2, 0x9, 0x8, '\x00', 0x7602}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffffc, 0x147}) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000037000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) 08:43:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000800)='/dev/input/mouse#\x00', 0x3, 0x200000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000880)={0xa00004, 0x9, 0x4, [], &(0x7f0000000840)={0x990a6e, 0x81, [], @ptr=0xfffffffffffeffff}}) r2 = syz_open_dev$sndpcmc(&(0x7f00000009c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x202) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r4 = syz_open_dev$vivid(&(0x7f00000008c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000900)={0x0, @reserved}) lstat(&(0x7f0000000740)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./bus\x00', 0x4, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000100)="1521edf4357e70f8175aba117a3f3b301f124f8273acc2b3f0bf24a0e07494a45e1fe2224415ec978faac2a9e79e08737fc423475a80692808a509b468b99c2dc0319d2af31e56b70d763e471d55cf84ed0405740173", 0x56, 0x7}, {&(0x7f0000000200)="9e20921fb4a1ae585f64201f1375319dc98927f36bfd222f13ee9dcfd0e667a988c0eca9c0c24892be6f698650680159806479775a61e1e18562e6d38512ead6205532cd25474f1cd497708227b0c9caa8df3ed3639de0ab3484fc8abad481df3c4a5f22104a7b667b86c0351da7ec2945948c069b22cab41cc014d1d2dadc6cc9cb387f7c7380e6a65c4ffa1a55f226156e05db70c04f5e010ac61879baad7a145abcd4b710b7d5b516e1d78cbea629ddb548e6dac6f9dadc77b8e1c525750b586186bbd6c5a189858093a3eb3e9e613b3e", 0xd2, 0x9}, {&(0x7f0000000380)="2a29c3921f4f7f4fba761afe1b7e617ea5dc7b025f252a3005e056b7176c81aae5d56bf111d3d43ecb26aff1557298165d97ecbc7b52ecff8b6c93040d4612cb7bd0411a7a7f926131d9790e2ed5f19954421e1410c56f48e0ba50743a980bd28645e25481aa7ee87028c8f6d099040febcade9ac14b5efb2a21203054da1bbf372549b6df3ef39056d67f2e4c317c", 0x8f, 0x100}, {&(0x7f0000000440)="683e3a74c544c3f5c214491421d5e7b621d1050ba4836b46cd44b5d0cb29e173bf5e64320764e08270e19fa8279c1d7fc7e7353753254d93362cdcf0a6d6148738dcd1b5024ffed8616239d68e094997b69e009feaff6774fc1c5b32eebc2b00034eed68a8043e2dd8fc7ed8cd2abe60ce3e7ce95c9d447447dd801e6384b91dde0fb782eb6c689c5755a76ec9cd2d0d861a0244ac4deaf2a3fc2f25028c13106eeb38ff74c91f5ac94e57105c5cc780a4ea8b7526515bff630a7b03c4621e9ad5b09e9d5588555bc15ce728c8787e0b76a1ebed9e2db7618a93bc209b9e004e6d5e2ccd6ad20c37d00049380994ea7f8e49d5c1dfad397fdf5739be", 0xfc, 0x8001}, {&(0x7f0000000540)="7c446a493cc5a95430c09ae812fefcbd5703325f4965b1157b554c30992b67ed8508cd2ca0cac7baa14937a58d84ac81243978f3f3094f72f245fdbd9a4ad218ff5ad290c0e6b17185135fe65aed1b31", 0x50, 0x3}], 0x200000, &(0x7f0000000a00)=ANY=[@ANYBLOB='nonumtail=0,obj_type=,subj_type=,euid=', @ANYRESDEC=r3, @ANYBLOB=',smackfshat=:N,audit,fsname=em0,dont_hash,dont_hash,fowner=', @ANYRESDEC=r5, @ANYBLOB="2c00d811efafba1cb707fa373c5f"]) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='='], 0x1) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 08:43:03 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7ff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000200)='./file0\x00', r1, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0) write$FUSE_INIT(r3, &(0x7f00000002c0)={0x50, 0x0, 0x1, {0x7, 0x1f, 0xffff, 0x200000, 0x81, 0x6, 0x8, 0x3ff}}, 0x50) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) getpeername$tipc(r4, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x8}) [ 204.297784][ T9446] FAT-fs (loop1): Unrecognized mount option "obj_type=" or missing value 08:43:03 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/hwrng\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001740)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001780)={'vcan0\x00', 0x0}) mount$9p_xen(&(0x7f00000005c0)='\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='9p\x00', 0x20000, &(0x7f0000000680)={'trans=xen,', {[{@loose='loose'}, {@cache_none='cache=none'}], [{@dont_hash='dont_hash'}]}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20c20000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040081}, 0x8000) r3 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x7, 0x400000) r4 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4000) sendfile(r3, r4, &(0x7f0000000540), 0x1f46) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040), 0x4) r6 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x41, 0x82) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000480)={0x2, 0x0, 0x8, 0x9, 0x8, 0xfffffffffffffffd}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x800, 0x0) r8 = fcntl$getown(r7, 0x9) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=0x0) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r5, &(0x7f00000003c0)={r7, r7, 0xffffffffffffffab}) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) recvfrom$packet(r7, &(0x7f0000000080)=""/69, 0x45, 0x2, &(0x7f0000000280)={0x11, 0x1, r10, 0x1, 0xcd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000130007006900000000000000ab0080482600000046000107000000141900010025000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 08:43:03 executing program 0: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket(0x0, 0x800, 0x3) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000100)={'rose0\x00', 0x9, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000009) 08:43:03 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x440) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f00000069c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) 08:43:03 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x20000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x544e, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x8002) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) write(r2, &(0x7f0000000080)="b63db85e1e8d0200fffffffbf0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b16004bbc69146d", 0x2e) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)) 08:43:03 executing program 0: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 3: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4000000000004, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r2, 0x0, &(0x7f000089b000)}, 0x16) 08:43:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x14, 0x4, 0x5, 0xff8000000, 0x2, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x1, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) 08:43:04 executing program 0: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:04 executing program 3: r0 = socket(0x0, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x83f, 0x400000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040), 0x10) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) 08:43:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000004c0)="c0dca5055e0bcfec7be070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:43:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80800) unshare(0x400) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/131, &(0x7f0000000180)=0xfffffffffffffe61) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 205.255766][ T9517] kvm [9515]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0xffff04d00000000f [ 205.296589][ T9517] kvm [9515]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0xffff04d00000000f [ 205.354141][ T9517] kvm [9515]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0xffff04d00000000f [ 206.778732][ T9207] Bluetooth: hci0: command 0xfc11 tx timeout [ 206.785891][ T1503] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 206.827982][ T9221] Bluetooth: hci0: Frame reassembly failed (-84) 08:43:08 executing program 2: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="3100000013000900690006007a000310ab008008080000004600010700000054090003c0256465a3000000000075702e1a", 0x31}], 0x1) io_setup(0x5, &(0x7f0000000000)=0x0) io_getevents(r1, 0x7, 0x53dec84cf532cc26, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 08:43:08 executing program 3: r0 = socket(0x0, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:08 executing program 0: r0 = socket(0x0, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:08 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @initdev}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r2 = getpgrp(r1) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0xc0, 0x0) sched_getattr(r2, &(0x7f0000000100), 0x30, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5055e0bcfec7be070") r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x141000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000980)={0x0, 0x2}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000a80)={r4, 0x6, 0x1ff, 0x3, 0x3, 0x17, 0x8000, 0x6, {r5, @in6={{0xa, 0x4e24, 0xff, @remote, 0x8}}, 0xffff, 0x3, 0xcd9, 0x4, 0x21cb}}, &(0x7f0000000b40)=0xb0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000440)={&(0x7f0000000300), 0x9, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r7 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x208000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='ppp1em1cgroup.\x00', &(0x7f0000000080)='./file0\x00', r7) syz_mount_image$gfs2(&(0x7f00000004c0)='gfs2\x00', &(0x7f0000000500)='./file0\x00', 0x40, 0x5, &(0x7f0000000840)=[{&(0x7f0000000540)="ea6600a2d61455dbde0df770bcbe9b447f453fe961aba10356a8632856ef732305fdb777f723b1a7ce39b473834d0a12908ffe746ce43a8b380d43cf396a3f860c5d29e3ad5c53616ac5174b3ba414d5b25635eca00073e6f05581d16b9799d791a6faa33b1ec4c31972f91b813991b2d1d2db6fe141b86ff953b152ba6e6af67390ad831f3244cfb20c05a1dc6cfc90278e926f5715c6024e72962febd7e49a204b64cd39c1942799b7d9dd13e61e60", 0xb0, 0x80000000}, {&(0x7f0000000600)="fa6d05ae21f2f48d9c6cf90463d6b7f5ef468a10e6ac7aa8e4f5cce58993a2b61da41fdfada87381f485a223c1b60cce7da4253e9b08e5ad9dedc19cb665f97ce9f71f9cd509cadfc6203e4ec2455d8584db581def1535d76fba5ff2b5bf7def590e260facd0a095c357bb82c8c7285d5d28afe0040c386f655a69301ef0cac921afedd3f9e47e47f47fda34370971a19523f7b92f39ee7fb3fb01d942ed6daf5795078e7dca393cfe81eb09d563ab6c4c37", 0xb2, 0x20}, {&(0x7f00000006c0)="981e6108e3170a25d8b0c12e3891ee9f38b93b4bd58f36eb39d029850abc90a286ab2e466d5cf3702f7989899b8bb5504656a9881f59683539c6689affd0ee765770c7ee8340df4cb0ed315358a98810d67f2e632069e09ea60d90edf74af54b", 0x60, 0x6c97acd0}, {&(0x7f0000000740)="45ae8ba128e746215bca755a523b9b271ef166c2099891fc7d18653bed8fcc8084e05a1894bc4ff776f37b847d308eff20e8024f6bc508a6553d3ea4169cce7fc1911f738bed24fc7e98aeb765c3a3651f2b106814bbde847dbe9bd93f255bb0c9fa0964a58923da6da2827996193a56718d5dde99dc909d80eb69ca499a53e024547f55d1152e1ecc7aa6c751c52ac14a7f7ce7e396abd9b953cf758e42693062925d16c6844ac53042988a8e", 0xad, 0x5}, {&(0x7f0000000800)="5a8372457459", 0x6, 0x4}], 0x900000, &(0x7f00000008c0)=ANY=[@ANYBLOB="61636c2c7374617466735f70657263656e74303030303030303030303030303038312c7365636c6162656c2c4673636f6e7407000000000000002c7065726d69745f646968656374696f2c6f626a5f747970653d404047504c7b747275737465646b657972696e672c61756469742c736d61636b66737472616eff1cbe72d4b736866f75702e002c00"]) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'\x00', r8}) 08:43:08 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000800)={@mcast1, 0x0}, &(0x7f0000000840)=0x14) r2 = geteuid() fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@rand_addr=0x4, @in=@empty, 0x4e20, 0x6, 0x4e21, 0x7b30, 0x2, 0x20, 0x20, 0x2f, r1, r2}, {0x4, 0x1f, 0x2589dc29, 0x40, 0xfffffffffffffffd, 0x1, 0x200, 0x80}, {0x100000000, 0xffffffff, 0x20, 0x3}, 0xfffffffffffffffb, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, {{@in=@remote, 0x4d4, 0x7f}, 0xa, @in6=@empty, 0x3502, 0x6, 0x2, 0xfffffffffffffff9, 0x4, 0x8}}, 0xe8) r3 = io_uring_setup(0xe4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 08:43:08 executing program 4: unshare(0x40000000) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x10) syslog(0x0, 0x0, 0xffffffffffffff97) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x404100, 0x0) write$P9_RLCREATE(r1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a3098faf3ecae19585980db1f9fa391152beee1528109b4b2695676d43e692b541e5cbcbfc88d649dd8fcb3fa932f902826fa646dcef6f4b6e73613172493a0bd62e875847d93f6e3c75e43b274652cadbfefd7ca68325ec21f2114e14f61801722118dfeaf54bd3fc23bfd5c02de3dfc88ee8165be10d1ebfd77f2ffff6f65e6c1"], 0x41) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x4f540912eedd4f2e) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000300)=0x10000, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000000)={'ip_vti0\x00', 0x2fff}) [ 208.847634][ T9207] Bluetooth: hci0: command 0xfc11 tx timeout [ 208.848481][ T1503] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 208.955673][ T9540] IPVS: ftp: loaded support on port[0] = 21 08:43:08 executing program 0: r0 = socket(0x0, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) [ 209.026828][ T9553] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 08:43:08 executing program 3: r0 = socket(0x0, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:08 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000b00)='rose0\x00', 0x10) 08:43:08 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) poll(&(0x7f0000000200), 0x2000000000000004, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xff8c, 0x0, 0x0, 0x800e004d1) read(r0, &(0x7f0000000040)=""/168, 0xa8) shutdown(r0, 0x0) 08:43:08 executing program 3: r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:08 executing program 0: r0 = socket(0x0, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) [ 209.781296][ T9540] IPVS: ftp: loaded support on port[0] = 21 08:43:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:09 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8000006, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 08:43:09 executing program 3: r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 0: r0 = socket(0x40000000015, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) dup2(r1, r0) 08:43:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) 08:43:09 executing program 3: r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 0: r0 = socket(0x40000000015, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 0: r0 = socket(0x40000000015, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) [ 210.377183][ T9610] dccp_close: ABORT with 1 bytes unread 08:43:09 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 08:43:09 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:09 executing program 0: socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x42) [ 210.805243][ T9639] binder: BINDER_SET_CONTEXT_MGR already set 08:43:10 executing program 0: socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 210.923673][ T9639] binder: 9638:9639 ioctl 40046207 0 returned -16 [ 211.157511][ T9638] dccp_close: ABORT with 1 bytes unread 08:43:10 executing program 0: socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x42) 08:43:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xef, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 08:43:10 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) [ 211.855563][ T9675] binder: BINDER_SET_CONTEXT_MGR already set [ 211.900103][ T9675] binder: 9666:9675 ioctl 40046207 0 returned -16 08:43:11 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 08:43:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:11 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 08:43:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:11 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x42) 08:43:11 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="c0dca5055e0bcfec7be070") keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfffffffffffffccc) 08:43:11 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 08:43:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:11 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x42) 08:43:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 08:43:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 08:43:11 executing program 0: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000480)='./bus\x00') ioctl(r1, 0x1000008912, &(0x7f0000000080)) pkey_alloc(0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) pkey_alloc(0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) 08:43:11 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="c0dca5055e0bcfec7be070") keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfffffffffffffccc) [ 212.827576][ T9714] binder: BINDER_SET_CONTEXT_MGR already set [ 212.845718][ T9714] binder: 9709:9714 ioctl 40046207 0 returned -16 [ 212.899948][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 212.899965][ T26] audit: type=1804 audit(1562056992.039:31): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir042280108/syzkaller.39W3El/30/bus" dev="sda1" ino=16604 res=1 [ 213.237628][ T26] audit: type=1804 audit(1562056992.319:32): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir042280108/syzkaller.39W3El/30/bus" dev="sda1" ino=16604 res=1 [ 213.398716][ T26] audit: type=1804 audit(1562056992.349:33): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir042280108/syzkaller.39W3El/30/bus" dev="sda1" ino=16604 res=1 08:43:12 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) dup(0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x200000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getpgid(0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x14, 0x40000000000016, 0xffffffffff7ffffd, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 08:43:12 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) [ 213.441674][ T26] audit: type=1804 audit(1562056992.529:34): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir042280108/syzkaller.39W3El/30/bus" dev="sda1" ino=16604 res=1 08:43:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 08:43:12 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 08:43:12 executing program 0: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000480)='./bus\x00') ioctl(r1, 0x1000008912, &(0x7f0000000080)) pkey_alloc(0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) pkey_alloc(0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) 08:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000200)='2', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000001c0)={'ip6gretap0\x00'}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r3, 0x0, 0x1512) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 08:43:12 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r1, &(0x7f0000000480)='./bus\x00') ioctl(r1, 0x1000008912, &(0x7f0000000080)) pkey_alloc(0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) pkey_alloc(0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) [ 213.913860][ T26] audit: type=1804 audit(1562056993.059:35): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957471442/syzkaller.TVd714/14/bus" dev="sda1" ino=16608 res=1 08:43:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x40000000, 0x1}}, 0x30) 08:43:13 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 318.927387][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 318.934939][ C0] (detected by 0, t=10502 jiffies, g=11861, q=84) [ 318.941636][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294968945-4294958442), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 318.955402][ C0] syz-executor.2 R running task 25832 9750 9183 0x00004000 [ 318.963971][ C0] Call Trace: [ 318.967386][ C0] [ 318.970453][ C0] sched_show_task.cold+0x2ed/0x34e [ 318.975782][ C0] rcu_sched_clock_irq.cold+0xac8/0xc13 [ 318.981552][ C0] update_process_times+0x32/0x80 [ 318.986630][ C0] tick_sched_handle+0xa2/0x190 [ 318.991591][ C0] tick_sched_timer+0x53/0x140 [ 318.996380][ C0] __hrtimer_run_queues+0x364/0xe40 [ 319.002189][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 319.007591][ C0] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 319.013168][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 319.019299][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 319.025400][ C0] hrtimer_interrupt+0x314/0x770 [ 319.030417][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 319.036001][ C0] apic_timer_interrupt+0xf/0x20 [ 319.041093][ C0] [ 319.044177][ C0] RIP: 0010:unwind_next_frame.part.0+0x35c/0xa20 [ 319.050818][ C0] Code: 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 c7 03 00 00 00 00 31 c0 48 ba 00 00 00 00 00 fc ff df 49 c7 04 14 00 00 00 00 <48> 8b 4d d0 65 48 33 0c 25 28 00 00 00 0f 85 43 03 00 00 48 81 c4 [ 319.070863][ C0] RSP: 0018:ffff888057d17438 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 319.079311][ C0] RAX: 0000000000000001 RBX: ffff888057d17510 RCX: 1ffff1100afa2eaa [ 319.087431][ C0] RDX: dffffc0000000000 RSI: 1ffff1100afa2e00 RDI: ffff888057d17558 [ 319.095687][ C0] RBP: ffff888057d174e8 R08: 0000000000000001 R09: ffff888057d17568 [ 319.103933][ C0] R10: ffff888057d17538 R11: ffff888057d17548 R12: 1ffff1100afa2e8c [ 319.112013][ C0] R13: 0000000000000000 R14: ffff888057d17f10 R15: ffff888057d17f48 [ 319.120047][ C0] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 319.126044][ C0] ? unwind_dump+0x100/0x100 [ 319.130949][ C0] ? __unwind_start+0x295/0x3d0 [ 319.136092][ C0] ? profile_setup.cold+0xbb/0xbb [ 319.141410][ C0] unwind_next_frame+0x3b/0x50 [ 319.146304][ C0] arch_stack_walk+0x81/0xf0 [ 319.151081][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.157170][ C0] stack_trace_save+0xac/0xe0 [ 319.162024][ C0] ? stack_trace_consume_entry+0x190/0x190 [ 319.168148][ C0] save_stack+0x23/0x90 [ 319.172438][ C0] ? save_stack+0x23/0x90 [ 319.176964][ C0] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 319.182790][ C0] ? kasan_slab_alloc+0xf/0x20 [ 319.187808][ C0] ? __kmalloc+0x14c/0x770 [ 319.192369][ C0] ? iter_file_splice_write+0x16e/0xbe0 [ 319.198077][ C0] ? direct_splice_actor+0x123/0x190 [ 319.203609][ C0] ? splice_direct_to_actor+0x366/0x970 [ 319.209385][ C0] ? do_splice_direct+0x1da/0x2a0 [ 319.214716][ C0] ? do_sendfile+0x597/0xd00 [ 319.219324][ C0] ? __x64_sys_sendfile64+0x1dd/0x220 [ 319.225193][ C0] ? do_syscall_64+0xfd/0x6a0 [ 319.230101][ C0] ? __lock_acquire+0x1700/0x4c20 [ 319.235237][ C0] ? cache_grow_end+0xa4/0x190 [ 319.240296][ C0] ? find_held_lock+0x35/0x130 [ 319.245105][ C0] ? cache_grow_end+0xa4/0x190 [ 319.249894][ C0] ? kasan_check_read+0x11/0x20 [ 319.255022][ C0] ? mark_lock+0xc0/0x11e0 [ 319.259459][ C0] ? lock_downgrade+0x920/0x920 [ 319.264542][ C0] ? mark_held_locks+0xa4/0xf0 [ 319.269344][ C0] ? kasan_unpoison_shadow+0x35/0x50 [ 319.274774][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 319.280639][ C0] kasan_slab_alloc+0xf/0x20 [ 319.285607][ C0] __kmalloc+0x14c/0x770 [ 319.290163][ C0] ? iter_file_splice_write+0x16e/0xbe0 [ 319.295911][ C0] iter_file_splice_write+0x16e/0xbe0 [ 319.301359][ C0] ? atime_needs_update+0x5f0/0x5f0 [ 319.306882][ C0] ? generic_file_splice_read+0x537/0x800 [ 319.312780][ C0] ? page_cache_pipe_buf_release+0x180/0x180 [ 319.319017][ C0] ? add_to_pipe+0x350/0x350 [ 319.323815][ C0] ? rw_verify_area+0x126/0x360 [ 319.328689][ C0] ? page_cache_pipe_buf_release+0x180/0x180 [ 319.334868][ C0] direct_splice_actor+0x123/0x190 [ 319.340116][ C0] splice_direct_to_actor+0x366/0x970 [ 319.345516][ C0] ? generic_pipe_buf_nosteal+0x10/0x10 [ 319.351109][ C0] ? do_splice_to+0x180/0x180 [ 319.355934][ C0] ? rw_verify_area+0x126/0x360 [ 319.360819][ C0] do_splice_direct+0x1da/0x2a0 [ 319.365983][ C0] ? splice_direct_to_actor+0x970/0x970 [ 319.371579][ C0] ? rcu_read_lock_sched_held+0x110/0x130 [ 319.377509][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.384117][ C0] ? __sb_start_write+0x1e5/0x4e0 [ 319.389366][ C0] do_sendfile+0x597/0xd00 [ 319.393836][ C0] ? do_compat_pwritev64+0x1c0/0x1c0 [ 319.399174][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.405738][ C0] ? put_timespec64+0xda/0x140 [ 319.410970][ C0] __x64_sys_sendfile64+0x1dd/0x220 [ 319.416345][ C0] ? __ia32_sys_sendfile+0x230/0x230 [ 319.423585][ C0] ? do_syscall_64+0x26/0x6a0 [ 319.428838][ C0] ? lockdep_hardirqs_on+0x418/0x5d0 [ 319.434192][ C0] ? trace_hardirqs_on+0x67/0x240 [ 319.439297][ C0] do_syscall_64+0xfd/0x6a0 [ 319.444131][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.450069][ C0] RIP: 0033:0x4597c9 [ 319.454189][ C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.476131][ C0] RSP: 002b:00007fea45b63c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.484715][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004597c9 [ 319.492735][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 319.501229][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.509338][ C0] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007fea45b646d4 [ 319.517575][ C0] R13: 00000000004c6def R14: 00000000004dc128 R15: 00000000ffffffff [ 319.525631][ C0] rcu: rcu_preempt kthread starved for 10561 jiffies! g11861 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 319.536853][ C0] rcu: RCU grace-period kthread stack dump: [ 319.542791][ C0] rcu_preempt R running task 29112 10 2 0x80004000 [ 319.551190][ C0] Call Trace: [ 319.554574][ C0] __schedule+0x755/0x1580 [ 319.559188][ C0] ? __sched_text_start+0x8/0x8 [ 319.564165][ C0] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 319.570077][ C0] ? schedule_timeout+0x47c/0xc50 [ 319.575547][ C0] ? lockdep_hardirqs_on+0x418/0x5d0 [ 319.580987][ C0] schedule+0xa8/0x270 [ 319.585234][ C0] schedule_timeout+0x486/0xc50 [ 319.590321][ C0] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 319.596507][ C0] ? usleep_range+0x170/0x170 [ 319.601240][ C0] ? trace_hardirqs_on+0x67/0x240 [ 319.606436][ C0] ? kasan_check_read+0x11/0x20 [ 319.611473][ C0] ? __next_timer_interrupt+0x1a0/0x1a0 [ 319.617305][ C0] ? swake_up_one+0x60/0x60 [ 319.621862][ C0] rcu_gp_kthread+0x9b2/0x18c0 [ 319.626948][ C0] ? rcu_barrier+0x310/0x310 [ 319.631591][ C0] ? trace_hardirqs_on+0x67/0x240 [ 319.636797][ C0] ? kasan_check_read+0x11/0x20 [ 319.641704][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 319.648208][ C0] ? __kthread_parkme+0x108/0x1c0 [ 319.653434][ C0] ? kasan_check_read+0x11/0x20 [ 319.658479][ C0] kthread+0x361/0x430 [ 319.662598][ C0] ? rcu_barrier+0x310/0x310 [ 319.667509][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 319.673806][ C0] ret_from_fork+0x24/0x30